CVE-2025-39918

A flaw was found in the linux kernal wifi subsystem mt76_txq_schedule_pending_wcid() and mt76_txq_schedule_pending() functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing a local attacker to cause a denial of service.

This vulnerability is evaluated as having a Moderate impact because exploitation requires the presence and active use of supported MediaTek Wi-Fi hardware, limiting the attack surface to endpoints equipped with these specific wireless devices. Red Hat Enterprise Linux server environments rarely deploy Wi-Fi interfaces or autoload wireless drivers in standard configurations. An attacker must possess local access on an affected host with the driver actively handling transmission queues to induce memory corruption and crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.