CVE-2025-38599: 
Linux Ubuntu vulnerability analysis and mitigation

CVE-2025-38599 is a vulnerability discovered in the Linux kernel affecting the WiFi subsystem, specifically in the mt76 driver for MediaTek MT7996 wireless chipsets. The vulnerability was disclosed on August 19, 2025, and involves a potential Out-Of-Boundary access issue in the mt7996_tx routine (NVD).

The vulnerability occurs in the mt7996tx() function of the Linux kernel's mt76 WiFi driver when the linkid parameter is set to IEEE80211LINKUNSPECIFIED, which can lead to an Out-Of-Boundary access condition. This issue specifically affects the MediaTek MT7996 wireless chipset implementation (NVD).

The vulnerability could potentially lead to Out-Of-Boundary access in affected systems, which may result in system instability or potential security implications for systems using the MT7996 wireless chipset (NVD).

The vulnerability has been resolved through patches in various Linux kernel versions. Multiple Linux distributions have released updates to address this issue, including fixes in Ubuntu's kernel packages for various versions such as 6.8.0-40.40 for noble, 5.15.0-121.131 for jammy, and 5.4.0-192.212 for focal releases (Ubuntu).