CVE-2025-39918

wifi: mt76: fix linked list corruption

State: Published
Severity: 8.8 High
Published: Oct 1, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: fix linked list corruption

Never leave scheduled wcid entries on the temporary on-stack list

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0b3be9d1d34e21dada69c539fbf51a5fe868028a to before e4d5a5fc61fdc65220a1ce078d24c1d20bbb0835Affected 0b3be9d1d34e21dada69c539fbf51a5fe868028a to before c91a59b04f928cb4a1436b0e0a27650883d0388aAffected 0b3be9d1d34e21dada69c539fbf51a5fe868028a to before 49fba87205bec14a0f6bd997635bf3968408161eAffected
LinuxLinux	6.12Affected before 6.12Not affected 6.12.46 through 6.12.Not affected 6.16.6 through 6.16.Not affected 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.