Answer in brief
CVE-2025-39849 records a Unknown severity vulnerability in wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC CN 4100 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=dd43f8f90206054e7da7593de0a334fb2cd0ea88 <8e751d46336205abc259ed3990e850a9843fb649 || >=c38c701851011c94ce3be1ccb3593678d2933fd8 <e472f59d02c82b511bc43a3f96d62ed08bf4537f || >=c38c701851011c94ce3be1ccb3593678d2933fd8 <31229145e6ba5ace3e9391113376fa05b7831ede || >=c38c701851011c94ce3be1ccb3593678d2933fd8 <5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523 || >=c38c701851011c94ce3be1ccb3593678d2933fd8 <62b635dcd69c4fde7ce1de4992d71420a37e51e3 || bf3c348c5fdcf00a7eeed04a1b83e454d2dca2e5 || >=6.1.16 <6.1.151 || >=6.2.3 <6.3 | 8e751d46336205abc259ed3990e850a9843fb649, e472f59d02c82b511bc43a3f96d62ed08bf4537f, 31229145e6ba5ace3e9391113376fa05b7831ede, 5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523, 62b635dcd69c4fde7ce1de4992d71420a37e51e3, 6.1.151, 6.3 |
| Linux/Linuxgeneric | 6.3 | Not reported |
| Siemens/SIMATIC CN 4100generic | >=0 <V5.0 | V5.0 |
Published upstream
Sep 19, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.
Quoted source text, attributed separately from HOL analysis.