CVE-2026-74324

A flaw was found in the mt7925 Wi-Fi driver of the Linux kernel. An attacker could exploit this vulnerability by providing a specially crafted firmware response during a test mode query. This improper validation of the response length can lead to a buffer over-read, potentially disclosing sensitive information from the kernel's memory to userspace.

This vulnerability is rated as Moderate impact for Red Hat because exploitation is restricted to local unprivileged users and requires the presence of specific MediaTek wireless hardware, limiting the attack surface and potential blast radius. Supported Red Hat Enterprise Linux releases are not affected as the vulnerable driver implementation is not shipped in default kernel packages. On custom or upstream-derived systems where the driver is active, an attacker interacting with device test mode queries could trigger a boundary read error, potentially exposing sensitive kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.