CVE-2021-47028
kernel: mt76: mt7915: fix txrate reporting
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 28, 2024
Updated · September 25, 2026
Description
In the Linux kernel, a vulnerability related to unexpected transmission rate (txrate) reporting was resolved in the MediaTek MT76 wireless driver (specifically the mt7915 module). The issue required adding proper checks to rate_info to prevent unexpected reporting that triggered a call trace involving functions like cfg80211_calculate_bitrate and mt7915_mcu_get_rx_rate.
Statement
This vulnerability is rated as Low severity because it is limited to systems equipped with specific MediaTek MT7915 wireless hardware and results primarily in incorrect rate calculation call traces without system compromise. Enterprise server environments rarely deploy or expose these Wi-Fi adapters, significantly limiting practical exposure. Furthermore, supported Red Hat Enterprise Linux releases are not affected by this flaw as the issue was resolved upstream prior to incorporation into modern enterprise kernels or involves drivers not enabled in older releases.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CWE-20 · Improper Input Validation