CVE-2025-38599: wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-19 · updated 2026-07-30
Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() Fis possible Out-Of-Boundary access in mt7996_tx routine if link_id is set to IEEE80211_LINK_UNSPECIFIED

Affected products

Linux kernel: from 6.15 before 6.15.10; from 6.16 before 6.16.1 — fixed in 6.15.10, 6.16.1

How to fix

Upgrade to a fixed version: Linux kernel 6.15.10, 6.16.1. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/64cbf0d7ce9afe20666da90ec6ecaec6ba5ac64b
https://git.kernel.org/stable/c/f43e7d8ae4b6a73213032545552bab26f76f113a
https://git.kernel.org/stable/c/f82eabd0ff8067d1ee95515f4174c9a9569d54cb

Get alerted when CVE-2025-38599 or the next vulnerability affects your stack