CVE-2025-39849

Katalog CVE

CVSS 7.8 · High EPSS 0,22%

Kerentanan Out-of-bounds Write pada linux kernel, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.

Rincian

Terbit di NVD

19 September 2025

Terakhir diubah

30 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/31229145e6ba5ace3e9391113376fa05b7831ede patch
• https://git.kernel.org/stable/c/5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523 patch
• https://git.kernel.org/stable/c/62b635dcd69c4fde7ce1de4992d71420a37e51e3 patch
• https://git.kernel.org/stable/c/8e751d46336205abc259ed3990e850a9843fb649 patch
• https://git.kernel.org/stable/c/e472f59d02c82b511bc43a3f96d62ed08bf4537f patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html mailing list · advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html