CVE-2025-38600 Information

Description

In the Linux kernel the following vulnerability has been resolved:

wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

The ssid->ssids[] and sreq->ssids[] arrays have MT7925_RNR_SCAN_MAX_BSSIDS elements so this >= needs to be > to prevent an out of bounds access.

Reference

https://git.kernel.org/stable/c/4d80d4fa986c5da99042b66bf30a028e7f564156 https://git.kernel.org/stable/c/b3a431fe2e399b2e0cc5f43f7e9d63d63d3710ee

CNNVD-202508-2163 (Published: 2025-08-19)

Share on: