CVE-2025-71100

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()

TID getting from ieee80211_get_tid() might be out of range of array size of sta_entry->tids[], so check TID is less than MAX_TID_COUNT. Othwerwise, UBSAN warn:

UBSAN: array-index-out-of-bounds in drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c:514:30 index 10 is out of range for type 'rtl_tid_data [9]'

This vulnerability is rated as Moderate severity rather than Important because exploitation requires the presence of specific Realtek RTL8192CU wireless hardware and primarily leads to a local denial of service via system crash. On typical enterprise installations of Red Hat Enterprise Linux, wireless network hardware and drivers are neither enabled nor commonly deployed. Exploiting this flaw requires an active connection or traffic on an interface driven by this specific hardware module.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.