CVE-2025-39849

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.

A bounds check was missing when copying the SSID IE in __cfg80211_connect_result(), allowing an over-length SSID element to overflow a fixed-size kernel buffer. A malicious AP or 802.11 frame injector in radio range could trigger kernel memory corruption during connection/auto-connect, leading to crash or potential code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module cfg80211 from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.