-

CVE-2026-98159

wifi: mt76: mt7921: validate CLC firmware records

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: validate CLC firmware records

The CLC region is supplied by firmware, but the loader trusts the
region count and each record length. A malformed image can make the
region table pointer precede the firmware buffer, make the record loop
fail to advance, or index phy->clc past its end. Validate the table and
record bounds before dereferencing or copying.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 46673662402884ca55a869e4ebe956e08e8b6b05
Status affected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 740272d46ffc8231709a5e774cf5e4a5785b8a02
Status affected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 602a950134ee2940136f60797e4457c3983b06ce
Status affected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 3896be051e928c891922d91de94c99519d215dff
Status affected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 3c505e2af16a9320f4355218394a955fbbc65322
Status affected
Version 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125
Version < 9417c5818a0146980c2608fda94c908e604eb033
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.1
Status affected
Version 0
Version < 6.1
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.041
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/602a950134ee2940136f60797e4457c3983b06ce
https://git.kernel.org/stable/c/3896be051e928c891922d91de94c99519d215dff
https://git.kernel.org/stable/c/3c505e2af16a9320f4355218394a955fbbc65322
https://git.kernel.org/stable/c/9417c5818a0146980c2608fda94c908e604eb033
https://git.kernel.org/stable/c/46673662402884ca55a869e4ebe956e08e8b6b05
https://git.kernel.org/stable/c/740272d46ffc8231709a5e774cf5e4a5785b8a02