Riskcovery

CVE-2025-38343

wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

State
Published
Severity
8.3 High
Published
Jul 10, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities such as CVE-2020-26145.

Scores

CVSSScoreVectorSource
3.18.3 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 24900688ee47071aa6a61e78473999b5b80f0423Affected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before d4b93f9c2f666011dcf810050ef60a6b8d06f186Affected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 5fd5b8132b5de08c99eea003f7715ff2e361b007Affected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 80fda1cd7b0a1edd0849dc71403a070d0922118dAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.95 through 6.6.*Not affected
  • 6.12.35 through 6.12.*Not affected
  • 6.15.4 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.