CVE-2025-39952 | Linux Kernel up to 6.6.107/6.12.48/6.16.8 wifi wlan_cfg.c wilc_wlan_parse_response_frame len buffer overflow

A vulnerability classified as critical was found in Linux Kernel up to 6.6.107/6.12.48/6.16.8. Affected is the function wilc_wlan_parse_response_frame of the file drivers/net/wireless/microchip/wilc1000/wlan_cfg.c of the component wifi. Executing manipulation of the argument len can lead to buffer overflow.

This vulnerability is registered as CVE-2025-39952. The attack requires access to the local network. No exploit is available.

Upgrading the affected component is advised.