CVE Database›Document archive›CVE-2025-38343

CVE-2025-38343

kernel: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 10, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities such as CVE-2020-26145.

Statement

This vulnerability poses no risk to Red Hat Enterprise Linux environments because the MediaTek MT7996 wireless hardware driver is not provided or enabled in supported kernel releases. Triggering the issue requires adjacent network proximity and physical systems equipped with this specific wireless chipset processing malformed broadcast or multicast frame fragments. As a result, default enterprise installations and virtualized environments remain unaffected.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified