CVE-2026-98238

A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network (WWAN) driver. This vulnerability allows an attacker to cause a Denial of Service (DoS) by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an internal array, resulting in an out-of-bounds read and an invalid memory dereference. Consequently, processing crafted traffic triggers a kernel crash.

This vulnerability is rated as Moderate impact because exploitation requires the presence of specialized MediaTek T7xx 5G WWAN hardware, restricting the attack surface to endpoints containing this specific PCI adapter. On affected systems with this driver loaded, receiving malformed network packets over the interface can trigger an out-of-bounds array access within kernel space. This dereference leads to a system crash, resulting in a denial of service, though it does not directly expose systems lacking this mobile broadband peripheral.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.