CVE-2025-71100CWE-125CWE-129

CVE-2025-71100

High · published January 13, 2026

CVSS v3.1
7.6
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()

TID getting from ieee80211_get_tid() might be out of range of array size

of sta_entry->tids[], so check TID is less than MAX_TID_COUNT. Othwerwise,

UBSAN warn:

UBSAN: array-index-out-of-bounds in drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c:514:30

index 10 is out of range for type 'rtl_tid_data [9]'

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-129 · Improper Validation of Array Index
Published
2026-01-13T21:16Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9.1, < 6.12.646.12.64
linux/linux_kernel≥ 6.13, < 6.18.46.18.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 13 JAN 15:34Z
    wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()
    cvelistv5