CVE-2025-38600

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

The ssid->ssids[] and sreq->ssids[] arrays have MT7925_RNR_SCAN_MAX_BSSIDS elements so this >= needs to be > to prevent an out of bounds access.

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the affected MediaTek wireless driver code is not present. Exploitation would require systems equipped with specific MediaTek Wi-Fi hardware performing hardware scanning operations. Consequently, Red Hat products are not impacted by this flaw.