CVE-2026-74263

A flaw was found in the Linux kernel's Wireless Wide Area Network (WWAN) t7xx driver. The t7xx_port_ctrl_tx() function, which handles control transmissions, fails to validate the return value of skb_clone(). An attacker with local access could exploit this by triggering a scenario where skb_clone() returns a NULL pointer, leading to a NULL pointer dereference. This vulnerability can cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity because exploitation requires local access, specific physical MediaTek WWAN hardware, and rare memory-allocation failure conditions. In standard enterprise deployments, supported Red Hat Enterprise Linux releases do not include the vulnerable driver code. Even where compatible hardware might be present, an attacker cannot easily force memory exhaustion, limiting the impact to a localized denial of service via a system crash without compromising confidentiality or data integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.