CVE-2025-38343
kernel: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 10, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities such as CVE-2020-26145.
Statement
This vulnerability poses no risk to Red Hat Enterprise Linux environments because the MediaTek MT7996 wireless hardware driver is not provided or enabled in supported kernel releases. Triggering the issue requires adjacent network proximity and physical systems equipped with this specific wireless chipset processing malformed broadcast or multicast frame fragments. As a result, default enterprise installations and virtualized environments remain unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified