8.8

CVE-2025-39862: wifi: mt76: mt7915: fix list corruption after hardware restart

Modified
AliasesUBUNTU-CVE-2025-39862DEBIAN-CVE-2025-39862CGA-224r-vq9h-qp64
Published 19-09-2025Last modified 21-10-2026

Vulnerability summary

CVE-2025-39862 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 18.2% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 8.8, adjacent network); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.26%
0%100%
Low · +0.07 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 2
USN-8781-1CGA-VXF9-6388-7G53

Timeline

  1. 19-09-2025
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix list corruption after hardware restart Since stations are recreated from scratch, all lists that wcids are added to must be cleared before calling ieee80211_restart_hw. Set wcid->sta = 0 for each wcid entry in order to ensure that they are not added again before they are ready.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

18%

Versus all other CVEs

30-day change

Increase +0.07 pp

From 0.19% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu124 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.69-r0 | < 6.12.76-r0 | < 6.12.74-r0 | < 6.12.71-r0 | < 6.12.66-r0 | < 6.12.80-r0 | < 6.12.70-r0 | < 6.12.78-r0 | < 6.12.67-r0 | < 6.12.72-r1 | < 6.12.68-r0 | < 6.12.65-r0 | < 6.12.62-r1 | < 6.12.77-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.62-r2 | < 6.12.68-r1 | < 6.12.65-r2 | < 6.12.74-r1 | < 6.12.63-r0 | < 6.12.77-r1 | < 6.12.72-r0
  • linux-azure-6.12< 6.12.68-r0 | < 6.12.76-r0 | < 6.12.65-r3 | < 6.12.69-r0 | < 6.12.78-r0 | < 6.12.65-r4 | < 6.12.74-r1 | < 6.12.67-r0 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.65-r2 | < 6.12.77-r2 | < 6.12.65-r1 | < 6.12.63-r0 | < 6.12.80-r0 | < 6.12.62-r2 | < 6.12.62-r1 | < 6.12.66-r0 | < 6.12.70-r0 | < 6.12.71-r0 | < 6.12.74-r0 | < 6.12.72-r0
  • linux-gcp-6.12< 6.12.74-r1 | < 6.12.65-r0 | < 6.12.70-r0 | < 6.12.62-r0 | < 6.12.77-r0 | < 6.12.77-r1 | < 6.12.69-r0 | < 6.12.74-r0 | < 6.12.63-r0 | < 6.12.66-r0 | < 6.12.65-r1 | < 6.12.67-r0 | < 6.12.68-r0 | < 6.12.62-r2 | < 6.12.77-r2 | < 6.12.76-r0 | < 6.12.62-r1 | < 6.12.72-r0 | < 6.12.68-r1 | < 6.12.65-r2 | < 6.12.80-r0 | < 6.12.78-r0 | < 6.12.71-r0
  • linux-qemu-6.12< 6.12.74-r0 | < 6.12.65-r1 | < 6.12.70-r0 | < 6.12.67-r0 | < 6.12.77-r1 | < 6.12.74-r1 | < 6.12.68-r0 | < 6.12.65-r2 | < 6.12.77-r2 | < 6.12.80-r0 | < 6.12.76-r0 | < 6.12.77-r0 | < 6.12.69-r0 | < 6.12.66-r0 | < 6.12.71-r0 | < 6.12.72-r0 | < 6.12.78-r0
  • linux-vmware-6.12< 6.12.77-r1 | < 6.12.74-r0 | < 6.12.66-r0 | < 6.12.74-r1 | < 6.12.72-r0 | < 6.12.67-r0 | < 6.12.69-r0 | < 6.12.68-r1 | < 6.12.77-r0 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.70-r0 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.78-r0 | < 6.12.77-r2 | < 6.12.76-r0 | < 6.12.65-r2
Linux2 products
  • linux≥ 8a55712d124fd8a919e8a69b70643e1a97280b4b, < 6d40c15d70c2dba2f68dd50e452255bfa1b016f0 | ≥ 8a55712d124fd8a919e8a69b70643e1a97280b4b, < 6826728f9fd7e7db57cd9647932eea47cbc645c6 | ≥ 8a55712d124fd8a919e8a69b70643e1a97280b4b, < 8fa8eb52bc2eb08d93202863b5fc478e0bebc00c | ≥ 8a55712d124fd8a919e8a69b70643e1a97280b4b, < 065c79df595af21d6d1b27d642860faa1d938774 | 3a931ebf67b89316c3b5bed2dca4479dd6f85803 | ≥ 6.1.188, < 6.2 | 6.2
  • linux_kernel≥ 6.2, < 6.16.6 | 6.17:rc1 | 6.17:rc2 | 6.17:rc3 | 6.17:rc4
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.115-2 | < 6.16.6-1

4 vendors · 132 products

References

12 links
Show all 12 references