In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: sme: cap SSID length in _cfg80211connect_result()
If the ssid->datalen is more than IEEE80211MAXSSID_LEN (32) it would lead to memory corruption so add some bounds checking.
[
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523",
"signature_version": "v1",
"id": "CVE-2025-39849-06d24522",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154645163757045373682971561709850808075",
"320529098358548360894855191280052426839",
"168164827314471616942353919614850898704",
"283620375564636789933965699764699316576",
"41078313865901390183729476833915800296",
"87005101122671819910167564196788765878",
"68429658471767088478743148063126437003",
"279517668426387264425246521107656214041",
"105482570292322110869672393800508666620"
]
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e751d46336205abc259ed3990e850a9843fb649",
"signature_version": "v1",
"id": "CVE-2025-39849-094eebb5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154645163757045373682971561709850808075",
"320529098358548360894855191280052426839",
"168164827314471616942353919614850898704",
"283620375564636789933965699764699316576",
"41078313865901390183729476833915800296",
"87005101122671819910167564196788765878",
"68429658471767088478743148063126437003",
"279517668426387264425246521107656214041",
"105482570292322110869672393800508666620"
]
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c",
"function": "__cfg80211_connect_result"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523",
"signature_version": "v1",
"id": "CVE-2025-39849-1d3f6dfb",
"digest": {
"function_hash": "307694190620145363038978256392452368134",
"length": 4398.0
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c",
"function": "__cfg80211_connect_result"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e751d46336205abc259ed3990e850a9843fb649",
"signature_version": "v1",
"id": "CVE-2025-39849-5bc81e41",
"digest": {
"function_hash": "255149880985208642991120375912083773337",
"length": 4058.0
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e472f59d02c82b511bc43a3f96d62ed08bf4537f",
"signature_version": "v1",
"id": "CVE-2025-39849-678d70ce",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154645163757045373682971561709850808075",
"320529098358548360894855191280052426839",
"168164827314471616942353919614850898704",
"283620375564636789933965699764699316576",
"41078313865901390183729476833915800296",
"87005101122671819910167564196788765878",
"68429658471767088478743148063126437003",
"279517668426387264425246521107656214041",
"105482570292322110869672393800508666620"
]
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c",
"function": "__cfg80211_connect_result"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e472f59d02c82b511bc43a3f96d62ed08bf4537f",
"signature_version": "v1",
"id": "CVE-2025-39849-8820f491",
"digest": {
"function_hash": "229027057329564400046169814291423593753",
"length": 4389.0
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62b635dcd69c4fde7ce1de4992d71420a37e51e3",
"signature_version": "v1",
"id": "CVE-2025-39849-adcb5fa4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154645163757045373682971561709850808075",
"320529098358548360894855191280052426839",
"168164827314471616942353919614850898704",
"283620375564636789933965699764699316576",
"41078313865901390183729476833915800296",
"87005101122671819910167564196788765878",
"68429658471767088478743148063126437003",
"279517668426387264425246521107656214041",
"105482570292322110869672393800508666620"
]
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c",
"function": "__cfg80211_connect_result"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31229145e6ba5ace3e9391113376fa05b7831ede",
"signature_version": "v1",
"id": "CVE-2025-39849-ef9edf62",
"digest": {
"function_hash": "307694190620145363038978256392452368134",
"length": 4398.0
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c",
"function": "__cfg80211_connect_result"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62b635dcd69c4fde7ce1de4992d71420a37e51e3",
"signature_version": "v1",
"id": "CVE-2025-39849-f2b59bab",
"digest": {
"function_hash": "307694190620145363038978256392452368134",
"length": 4398.0
}
},
{
"deprecated": false,
"target": {
"file": "net/wireless/sme.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31229145e6ba5ace3e9391113376fa05b7831ede",
"signature_version": "v1",
"id": "CVE-2025-39849-f8cc161e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154645163757045373682971561709850808075",
"320529098358548360894855191280052426839",
"168164827314471616942353919614850898704",
"283620375564636789933965699764699316576",
"41078313865901390183729476833915800296",
"87005101122671819910167564196788765878",
"68429658471767088478743148063126437003",
"279517668426387264425246521107656214041",
"105482570292322110869672393800508666620"
]
}
}
]