-
CVE-2026-90382
- EPSS 0.21%
- Veröffentlicht 17.09.2026 16:09:19
- Zuletzt bearbeitet 17.09.2026 17:17:37
- Erkennungen
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
The MPDU length in the rx descriptor comes from the hardware. In
monitor mode with the fcsfail filter enabled, the hardware passes up
corrupted frames, and a corrupted frame can report a length larger
than the received buffer. The bounds check correctly discards such
frames, but its WARN_ON_ONCE wrapper means any over-the-air garbage
frame taints the kernel, and panics it on the first such frame when
panic_on_warn is set.
Drop the WARN and discard the frame silently, matching what
commit c2d4c8723dbf ("mt76x2: remove some harmless WARN_ONs in tx
status and rx path") did for the neighboring rx and tx status paths.
Observed immediately on rx with an MT7612U in fcsfail monitor mode
on a busy channel.Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
61b1f6d92249bc34580ff19de7c69c805f82adca
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
c65bbfc730df9ebf0fea8e286b0ad2dfab03dbfe
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
d55e7aede542c4c76ead82d37d0c112f21eb2ac2
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
b6e7958602bd1acdb8ae92703b6689a28bcc9bc0
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
2d31e332c13b1db7745a7bd9cf74bc105524bcac
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
17d6b89e09eac2d90272fceeba3644e92212e02f
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
6def491fe9c4e83aa8cba62d74e9d4ab751ee967
Status
affected
Version
7bc04215a66b60e198aecaee8418f6d79fa19faa
Version <
81497634d9f872fd3e8b03aada55574afff6f174
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
4.16
Status
affected
Version
0
Version <
4.16
Status
unaffected
Version <=
5.10.*
Version
5.10.270
Status
unaffected
Version <=
5.15.*
Version
5.15.221
Status
unaffected
Version <=
6.1.*
Version
6.1.188
Status
unaffected
Version <=
6.6.*
Version
6.6.157
Status
unaffected
Version <=
6.12.*
Version
6.12.110
Status
unaffected
Version <=
6.18.*
Version
6.18.52
Status
unaffected
Version <=
7.2.*
Version
7.2.6
Status
unaffected
Version <=
*
Version
7.3-rc1
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.116 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/61b1f6d92249bc34580ff19de7c69c805f82adca
https://git.kernel.org/stable/c/c65bbfc730df9ebf0fea8e286b0ad2dfab03dbfe
https://git.kernel.org/stable/c/d55e7aede542c4c76ead82d37d0c112f21eb2ac2
https://git.kernel.org/stable/c/b6e7958602bd1acdb8ae92703b6689a28bcc9bc0
https://git.kernel.org/stable/c/2d31e332c13b1db7745a7bd9cf74bc105524bcac
https://git.kernel.org/stable/c/17d6b89e09eac2d90272fceeba3644e92212e02f
https://git.kernel.org/stable/c/6def491fe9c4e83aa8cba62d74e9d4ab751ee967
https://git.kernel.org/stable/c/81497634d9f872fd3e8b03aada55574afff6f174