CVE-2025-39849

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-39849
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39849.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39849
Downstream
Related
Published
2025-09-19T15:26:22.073Z
Modified
2025-11-27T02:33:17.935462Z
Summary
wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: sme: cap SSID length in _cfg80211connect_result()

If the ssid->datalen is more than IEEE80211MAXSSID_LEN (32) it would lead to memory corruption so add some bounds checking.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2025/39xxx/CVE-2025-39849.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dd43f8f90206054e7da7593de0a334fb2cd0ea88
Fixed
8e751d46336205abc259ed3990e850a9843fb649
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c38c701851011c94ce3be1ccb3593678d2933fd8
Fixed
e472f59d02c82b511bc43a3f96d62ed08bf4537f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c38c701851011c94ce3be1ccb3593678d2933fd8
Fixed
31229145e6ba5ace3e9391113376fa05b7831ede
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c38c701851011c94ce3be1ccb3593678d2933fd8
Fixed
5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c38c701851011c94ce3be1ccb3593678d2933fd8
Fixed
62b635dcd69c4fde7ce1de4992d71420a37e51e3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bf3c348c5fdcf00a7eeed04a1b83e454d2dca2e5

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.151
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.105
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.12.46
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.16.6