CVE-2026-46136
wifi: mt76: mt7921: fix a potential clc buffer length underflow
At a glance
- Severity
- Not available
- EPSS
- EPSS 0.13 % · percentile 3 (2026-10-27)
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Undergoing Analysis
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in CLC. This underflow leads to an almost infinite loop or an invalid power setting resulting in driver initialization failure.
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Weaknesses (CWE)
European references
- ENISA EUVD · EUVD-2026-32763
- GCVE · GCVE-0-2026-46136
CERT-FR advisories
- CERTFR-2026-AVI-1298 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1252 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1229 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1162 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1066 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0862 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0731 — Multiples vulnérabilités dans les produits Microsoft · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.75 < 6.1.175cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.14 < 6.6.140cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7.2 < 6.12.88cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.30cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 7.0.7
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 0c9318d49e501a5d50b02bd91a4813bde2353488 < 2a79b1a492bcfa725383b6580cd93a6862308c85 ; affected 15173a1697236793e9e900b82fece6f99d41b2a7 < e451c325b000b9a0081fd93bc6d103d6943d4b55 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 90cc573fd2f46ddbc2c329e7814b5ba3deb7b939 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 0aa63d33742b805d1a218d18d12b983cce4b2f7b ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < a0111847f0b4f6023f6dd320114697514e024ba3 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 5373f8b19e568b5c217832b9bbef165bd2b2df14 |
| Linux · Linux | affected 6.8 ; unaffected 0 < 6.8 ; unaffected 6.1.175 ≤ 6.1.* ; unaffected 6.6.140 ≤ 6.6.* ; unaffected 6.12.88 ≤ 6.12.* ; unaffected 6.18.30 ≤ 6.18.* |
References
- https://git.kernel.org/stable/c/2a79b1a492bcfa725383b6580cd93a6862308c85
- https://git.kernel.org/stable/c/e451c325b000b9a0081fd93bc6d103d6943d4b55
- https://git.kernel.org/stable/c/90cc573fd2f46ddbc2c329e7814b5ba3deb7b939
- https://git.kernel.org/stable/c/0aa63d33742b805d1a218d18d12b983cce4b2f7b
- https://git.kernel.org/stable/c/a0111847f0b4f6023f6dd320114697514e024ba3
- https://git.kernel.org/stable/c/5373f8b19e568b5c217832b9bbef165bd2b2df14
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |