CVE-2025-39919

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: add missing check for rx wcid entries

Non-station wcid entries must not be passed to the rx functions. In case of the global wcid entry, it could even lead to corruption in the wcid array due to pointer being casted to struct mt7996_sta_link using container_of.

Red Hat Enterprise Linux is not affected by this flaw because the affected MediaTek MT7996 wireless driver code was introduced in upstream kernel versions not present in any supported Red Hat distributions. While upstream kernels containing this defect risk memory corruption when processing specific wireless client identifier entries during packet reception, Red Hat kernels do not incorporate the commit introducing this vulnerability. As a result, this flaw presents no operational risk to Red Hat environments.