CVE-2026-74322

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability allows an attacker to trigger an invalid memory access when processing specific Wi-Fi frames. This can lead to a system crash, resulting in a Denial of Service (DoS) for affected systems.

This vulnerability is rated as having Moderate impact because exploitation is constrained to a local denial of service and requires specific MediaTek wireless hardware to be installed and active. An attacker with local access would need to transmit specially crafted injected frames to induce a kernel null-pointer dereference and crash the system, with no risk to data integrity or confidentiality. Enterprise environments running Red Hat Enterprise Linux typically do not utilize this wireless chipset, and the vulnerable code is not present in supported enterprise kernel builds, substantially limiting real-world risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.