CVE Database›Document archive›CVE-2021-47028

CVE-2021-47028

kernel: mt76: mt7915: fix txrate reporting

Loading…

Severity

Low

Red Hat Product Security

2.3

CVSS 3.1

Review impact separately from score.

Published · February 28, 2024

Updated · September 25, 2026

Description

In the Linux kernel, a vulnerability related to unexpected transmission rate (txrate) reporting was resolved in the MediaTek MT76 wireless driver (specifically the mt7915 module). The issue required adding proper checks to rate_info to prevent unexpected reporting that triggered a call trace involving functions like cfg80211_calculate_bitrate and mt7915_mcu_get_rx_rate.

Statement

This vulnerability is rated as Low severity because it is limited to systems equipped with specific MediaTek MT7915 wireless hardware and results primarily in incorrect rate calculation call traces without system compromise. Enterprise server environments rarely deploy or expose these Wi-Fi adapters, significantly limiting practical exposure. Furthermore, supported Red Hat Enterprise Linux releases are not affected by this flaw as the issue was resolved upstream prior to incorporation into modern enterprise kernels or involves drivers not enabled in older releases.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CWE-20 · Improper Input Validation