CVE-2026-63832

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs due to improper handling of Wi-Fi station additions, where the driver fails to adequately verify existing client connections. A remote attacker could exploit this by manipulating Wi-Fi authentication processes, leading to corruption of internal kernel data structures. This corruption can cause system instability and a denial of service, making the affected system unresponsive.

This vulnerability is rated as Moderate impact because exploiting it requires an attacker to interact with a system equipped with vulnerable MediaTek wireless hardware, and successful exploitation leads to a kernel crash (denial of service) rather than remote arbitrary code execution. Most standard Red Hat Enterprise Linux enterprise server environments do not deploy or utilize Wi-Fi network interfaces, limiting overall exposure primarily to client or edge systems equipped with affected wireless hardware. Systems without MediaTek mt76 wireless adapters loaded or active are not affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.