CVE-2025-37973

HighCVSS 7.1/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

Currently during the multi-link element defragmentation process, the multi-link element length added to the total IEs length when calculating the length of remaining IEs after the multi-link element in cfg80211_defrag_mle(). This could lead to out-of-bounds access if the multi-link element or its corresponding fragment elements are the last elements in the IEs buffer.

To address this issue, correctly calculate the remaining IEs length by deducting the multi-link element end offset from total IEs end offset.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10, < 73dde269a1a43e6b1aa92eba13ad2df58bfdd38e; >= 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10, < 9423f6da825172b8dc60d4688ed3d147291c3be9; >= 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10, < e1c6d0c6199bd5f4cfc7a66ae7032b6e805f904d; >= 2481b5da9c6b2ee1fde55a1c29eb2ca377145a10, < 023c1f2f0609218103cbcb48e0104b144d4a16dc
LinuxLinux6.5

References

Timeline

Published
May 20, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-379745.5In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The CVE-2025-379757.1In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code alCVE-2025-379775.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set If CVE-2025-379785.5In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple pCVE-2025-379797.8In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values intCVE-2025-37987.2A vulnerability, which was classified as critical, has been found in WCMS 11. This issue affects the function sub of the file app/admin/AdvaCVE-2025-379805.5In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When regisCVE-2025-379817.8In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi CVE-2025-379825.5In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from CVE-2025-379835.5In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry..CVE-2025-379845.5In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() HerCVE-2025-379854.7In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing
CVE-2025-37973: High severity, CVSS 7.1 | Vulnix