CVE-2025-38600

MEDIUM

Linux Kernel - Out-of-Bounds Access

Title source: rule
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() The ssid->ssids[] and sreq->ssids[] arrays have MT7925_RNR_SCAN_MAX_BSSIDS elements so this >= needs to be > to prevent an out of bounds access.

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 5.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-193
Status published
Products (2)
linux/Kernel 6.16.0 - 6.16.1linux
linux/linux_kernel 6.16
Published Aug 19, 2025
Tracked Since Feb 18, 2026