CVE-2025-71100

Source
https://cve.org/CVERecord?id=CVE-2025-71100
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71100.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-71100
Downstream
Related
Published
2026-01-13T15:34:59.039Z
Modified
2026-03-31T17:29:41.575050Z
Summary
wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cutxfill_desc()

TID getting from ieee80211gettid() might be out of range of array size of staentry->tids[], so check TID is less than MAXTID_COUNT. Othwerwise, UBSAN warn:

UBSAN: array-index-out-of-bounds in drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c:514:30 index 10 is out of range for type 'rtltiddata [9]'

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71100.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8ca4cdef93297c9b9bf08da39bc940bd20acbb94
Fixed
9765d6eb8298b07d499cdf9ef7c237d3540102d6
Fixed
90a15ff324645aa806d81fa349497cd964861b66
Fixed
dd39edb445f07400e748da967a07d5dca5c5f96e

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71100.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.12.64
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71100.json"