Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-39864 Details

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks properly"), adjust cfg80211_update_known_bss() to free the last beacon frame elements only if they're not shared via the corresponding 'hidden_beacon_bss' pointer.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-032379.html siemens-SADP
https://cert-portal.siemens.com/productcert/html/ssa-089022.html siemens-SADP
https://git.kernel.org/stable/c/26e84445f02ce6b2fe5f3e0e28ff7add77f35e08 kernel.orgPatch
https://git.kernel.org/stable/c/5b7ae04969f822283a95c866967e42b4d75e0eef kernel.orgPatch
https://git.kernel.org/stable/c/6854476d9e1aeaaf05ebc98d610061c2075db07d kernel.orgPatch

see all 12 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 5.4, < 5.4.299
>= 5.5, < 5.10.243
>= 5.11, < 5.15.192
>= 5.16, < 6.1.151
>= 6.2, < 6.6.105

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*

Remediation

  • No remediation found in references.
debian debian linux
11.0

CPE

  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-39864
NVD Published Date:
Sep 19, 2025
NVD Last Modified:
Jul 30, 2026
Source:
kernel.org
CVE-2025-39864 Details - Not Deferred