CVE-2026-23325
kernel: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's mt76 WiFi driver, specifically within the mt7996 component. This vulnerability, an out-of-bounds (OOB) access, occurs because the driver does not adequately check the length of incoming data frames before attempting to read or write to memory. A local attacker could exploit this weakness to trigger memory corruption, which may lead to a system crash (Denial of Service) or other unpredictable system behavior.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-805 · Buffer Access with Incorrect Length Value