01 Record

CVE-2025-39891

wifi: mwifiex: Initialize the chan_stats array to zero

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: mwifiex: Initialize the chan_stats array to zero

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.8% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-01 07:42Z11 MO AGO

Last updated

2026-05-11 21:38Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass

Data version

5.2

Document digest

505a016d354428ad97eb378e00eec49ff5f1ad0dad2b1f992c483ff87e89e811

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbf35443314acb43fa8a3f9f8046e14cbe178762b to < 9eb0118b3470b4d2e4e3bbb1fc088b30c0285d65, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 05daef0442d28350a1a0d6d0e2cab4a7a91df475, bf35443314acb43fa8a3f9f8046e14cbe178762b to < acdf26a912190fc6746e2a890d7d0338190527b4, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 32c124c9c03aa755cbaf60ef7f76afd918d47659, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 9df29aa5637d94d24f7c5f054ef4feaa7b766111, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 06616410a3e5e6cd1de5b7cbc668f1a7edeedad9, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 5285b7009dc1e09d5bb9e05fae82e1a807882dbc, bf35443314acb43fa8a3f9f8046e14cbe178762b to < 0e20450829ca3c1dbc2db536391537c57a40fe0b, 3.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/9eb0118b3470b4d2e4e3bbb1fc088b30c0285d65
git.kernel.orghttps://git.kernel.org/stable/c/05daef0442d28350a1a0d6d0e2cab4a7a91df475
git.kernel.orghttps://git.kernel.org/stable/c/acdf26a912190fc6746e2a890d7d0338190527b4
git.kernel.orghttps://git.kernel.org/stable/c/32c124c9c03aa755cbaf60ef7f76afd918d47659
git.kernel.orghttps://git.kernel.org/stable/c/9df29aa5637d94d24f7c5f054ef4feaa7b766111
git.kernel.orghttps://git.kernel.org/stable/c/06616410a3e5e6cd1de5b7cbc668f1a7edeedad9
git.kernel.orghttps://git.kernel.org/stable/c/5285b7009dc1e09d5bb9e05fae82e1a807882dbc
git.kernel.orghttps://git.kernel.org/stable/c/0e20450829ca3c1dbc2db536391537c57a40fe0b
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-39891

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-39891

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References