Buffer Length Validation Flaw in Linux Kernel Affects mac80211 WiFi Functionality

CVE-2025-39957

What is CVE-2025-39957?

A vulnerability exists in the Linux kernel's mac80211 subsystem that affects the S1G capability element. The issue arises from insufficient handling of the scan_ies_len, causing a buffer length validation failure during hardware scans. This flaw results in a failure to initiate hardware scanning, which can lead to performance issues and potential unresponsiveness in WiFi functionalities. Mitigation has been implemented to ensure the S1G capability length is properly accounted for, enhancing the robustness of scanning features.

References