VDB

CVE-2025-38657

CVE-2025-38657 PUBLISHED CVSS 7.099999904632568 HIGH

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch() The "link_id" value comes from the user via debugfs. If it's larger than BITS_PER_LONG then that would result in shift wrapping and potentially an out of bounds access later. In fact, we can limit it to IEEE80211_MLD_MAX_NUM_LINKS (15). Fortunately, only root can write to debugfs files so the security impact is minimal.

EPSS 0.03% · 8.7th percentile

Risk Scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS Score
0.03%
8.7th percentile

Affected Products

VendorProductVersions
LinuxLinux6.17, 6.16, 0
linuxlinux_kernel6.16, 6.16, 6.16

Timeline

  • Jan 21, 1970 Security Advisory
  • Aug 22, 2025 Coalition ESS Score
  • Aug 22, 2025 CVE Published
  • Aug 23, 2025 EPSS Score
  • Aug 26, 2025 Coalition ESS Score
  • Aug 31, 2025 EPSS Score
  • Sep 8, 2025 EPSS Score
  • Sep 16, 2025 EPSS Score
  • Sep 24, 2025 EPSS Score
  • Oct 2, 2025 EPSS Score
  • Oct 4, 2025 Coalition ESS Score
  • Oct 6, 2025 Coalition ESS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›