Riskcovery

CVE-2025-38600

wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

State
Published
Severity
8.8 High
Published
Aug 19, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

The ssid->ssids[] and sreq->ssids[] arrays have MT7925_RNR_SCAN_MAX_BSSIDS elements so this >= needs to be > to prevent an out of bounds access.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8284815ca161e0fa0861cc4085f1c0141e10a34d to before 4d80d4fa986c5da99042b66bf30a028e7f564156Affected
  • 8284815ca161e0fa0861cc4085f1c0141e10a34d to before b3a431fe2e399b2e0cc5f43f7e9d63d63d3710eeAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.