PT-2025-40648

CVE-2025-39952

·

Published

2025-08-29

·

Updated

2026-10-18

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A buffer overflow issue exists in the wilc1000 driver related to WID string configuration. The problem occurs during the parsing of response frames, specifically when copying data into the cfg->s[i]->str buffer. A size check has been added to prevent the overflow, based on the WID type received from the firmware and the size limits defined in the wilc cfg str vals structure. The vulnerable function is wilc wlan parse response frame().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ECHO-4142-5618-A42E
MGASA-2025-0309
MGASA-2025-0310
OESA-2025-2695
OESA-2025-2696
OESA-2025-2700
OESA-2026-2674
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:21040-1
SUSE-SU-2025:21052-1
SUSE-SU-2025:21056-1
SUSE-SU-2025:21064-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4128-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4140-1
SUSE-SU-2025:4141-1
SUSE-SU-2025:4301-1
SUSE-SU-2026:20560-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8165-1
USN-8261-1
Found an issue in the description? Have something to add? Feel free to write us 👾