CVE-2025-38599

HighCVSS 7.1/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()

Fis possible Out-Of-Boundary access in mt7996_tx routine if link_id is set to IEEE80211_LINK_UNSPECIFIED

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 3ce8acb86b6614b9f7af794f119f9627efe6b302, < f82eabd0ff8067d1ee95515f4174c9a9569d54cb; >= 3ce8acb86b6614b9f7af794f119f9627efe6b302, < f43e7d8ae4b6a73213032545552bab26f76f113a; >= 3ce8acb86b6614b9f7af794f119f9627efe6b302, < 64cbf0d7ce9afe20666da90ec6ecaec6ba5ac64b
LinuxLinux6.15

References

Timeline

Published
Aug 19, 2025
Last modified
Jul 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-38606.4The CarDealerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘saleclass' parameter in all versions up to, anCVE-2025-386005.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() The ssid->sCVE-2025-386015.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a numCVE-2025-386025.5In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for tCVE-2025-386045.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stCVE-2025-386055.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()CVE-2025-386065.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon misCVE-2025-386075.5In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset (if a & b ...) as a jump in CFG computation BPF_JSET CVE-2025-386085.5In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls WCVE-2025-386095.5In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdCVE-2025-38615.4The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due CVE-2025-386105.5In the Linux kernel, the following vulnerability has been resolved: powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
CVE-2025-38599: High severity, CVSS 7.1 | Vulnix