CVEvulnerability
CVE-2025-38343
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-10
- Last modified
- 2026-07-30
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 8.3 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
IEEE 802.11 fragmentation can only be applied to unicast frames.
Therefore, drop fragments with multicast or broadcast RA. This patch
addresses vulnerabilities such as CVE-2020-26145.
Affected configurations
• linux linux kernel (>= 6.2 < 6.6.95)
• linux linux kernel (>= 6.7 < 6.12.35)
• linux linux kernel (>= 6.13 < 6.15.4)
References
- https://git.kernel.org/stable/c/24900688ee47071aa6a61e78473999b5b80f0423 Patch
- https://git.kernel.org/stable/c/5fd5b8132b5de08c99eea003f7715ff2e361b007 Patch
- https://git.kernel.org/stable/c/80fda1cd7b0a1edd0849dc71403a070d0922118d Patch
- https://git.kernel.org/stable/c/d4b93f9c2f666011dcf810050ef60a6b8d06f186 Patch