Memory Corruption Vulnerability in Linux Kernel Affecting Wi-Fi Drivers by Linux Foundation

CVE-2025-39919

What is CVE-2025-39919?

A memory corruption issue was identified in the Linux kernel's implementation of the mt76 Wi-Fi driver. The vulnerability arises from the absence of a necessary validation check for non-station Wireless Client ID (wcid) entries during reception handling. When these invalid entries, particularly a global wcid entry, are processed by the receiver functions, it risks corrupting the wcid array. This could result in significant stability issues and affect the performance of wireless connectivity. Users are urged to apply patches to safeguard their systems.

References