CVE-2025-38599

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()

Fis possible Out-Of-Boundary access in mt7996_tx routine if link_id is set to IEEE80211_LINK_UNSPECIFIED

This vulnerability is assessed as Moderate severity rather than Important because triggering the flaw requires local access and specialized MediaTek wireless hardware, limiting the blast radius to a denial of service without enabling arbitrary code execution. Furthermore, supported Red Hat Enterprise Linux releases do not incorporate the affected upstream driver code, leaving standard enterprise deployments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.