Review reviewHigh

CVE-2025-39849

Linux Linux, SIMATIC CN 4100, linux kernel

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.

CVSS: 7.8
EPSS: 0.20%
CISA KEV: Not listed
Published: 2025.09.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.20%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, SIMATIC CN 4100, linux kernel
Affected versions: >= dd43f8f90206054e7da7593de0a334fb2cd0ea88 < 8e751d46336205abc259ed3990e850a9843fb649, >= c38c701851011c94ce3be1ccb3593678d2933fd8 < e472f59d02c82b511bc43a3f96d62ed08bf4537f, >= c38c701851011c94ce3be1ccb3593678d2933fd8 < 31229145e6ba5ace3e9391113376fa05b7831ede, >= c38c701851011c94ce3be1ccb3593678d2933fd8 < 5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523, >= c38c701851011c94ce3be1ccb3593678d2933fd8 < 62b635dcd69c4fde7ce1de4992d71420a37e51e3, >= bf3c348c5fdcf00a7eeed04a1b83e454d2dca2e5, >= 6.1.16 < 6.1.151, >= 6.2.3 < 6.3, >= 6.3, < V5.0, >= 6.2.3 < 6.6.105, >= 6.7 < 6.12.46, >= 6.13 < 6.16.6, 6.17, 11.0
Fixed versions: 6.1.151, 6.6.105, 6.12.46, 6.16.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, SIMATIC CN 4100, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787