CVE-2025-38343

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38343
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities such as CVE-2020-26145.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/24900688ee47071aa6a61e78473999b5b80f0423 Patch
https://git.kernel.org/stable/c/5fd5b8132b5de08c99eea003f7715ff2e361b007 Patch
https://git.kernel.org/stable/c/80fda1cd7b0a1edd0849dc71403a070d0922118d Patch
https://git.kernel.org/stable/c/d4b93f9c2f666011dcf810050ef60a6b8d06f186 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Nov 2025, 12:52

Type Values Removed Values Added
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mt76: mt7996: la eliminación de fragmentos con RA de multidifusión o difusión. La fragmentación IEEE 802.11 solo se puede aplicar a tramas de unidifusión. Por lo tanto, se deben eliminar fragmentos con RA de multidifusión o difusión. Este parche corrige vulnerabilidades como CVE-2020-26145.
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/24900688ee47071aa6a61e78473999b5b80f0423 - () https://git.kernel.org/stable/c/24900688ee47071aa6a61e78473999b5b80f0423 - Patch
References () https://git.kernel.org/stable/c/5fd5b8132b5de08c99eea003f7715ff2e361b007 - () https://git.kernel.org/stable/c/5fd5b8132b5de08c99eea003f7715ff2e361b007 - Patch
References () https://git.kernel.org/stable/c/80fda1cd7b0a1edd0849dc71403a070d0922118d - () https://git.kernel.org/stable/c/80fda1cd7b0a1edd0849dc71403a070d0922118d - Patch
References () https://git.kernel.org/stable/c/d4b93f9c2f666011dcf810050ef60a6b8d06f186 - () https://git.kernel.org/stable/c/d4b93f9c2f666011dcf810050ef60a6b8d06f186 - Patch

10 Jul 2025, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-10 09:15

Updated : 2025-11-18 12:52

NVD link : CVE-2025-38343

Mitre link : CVE-2025-38343

CVE.ORG link : CVE-2025-38343

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo