Memory Corruption Vulnerability in Linux Kernel Affecting Wifi Configuration

CVE-2025-39849

What is CVE-2025-39849?

A vulnerability in the Linux kernel related to wifi configuration has been identified, specifically concerning the handling of SSID lengths. When the SSID data length exceeds the maximum allowed limit (32 bytes), it could lead to memory corruption. This issue arises from insufficient bounds checking within the function responsible for processing connection results, __cfg80211_connect_result(). Proper validation has been implemented to mitigate this risk and ensure stability and security in wifi operations.

References