VYPR
High severity8.8NVD Advisory· Published Oct 1, 2025· Updated Jul 30, 2026

CVE-2025-39919

CVE-2025-39919

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: add missing check for rx wcid entries

Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996_sta_link using container_of.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Linux/Kernel7 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.15,<6.16.6
    • cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.15
  • osv-coords
    Range: >= 6.15.0, < 6.16.6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.