CVE-2026-46136

wifi: mt76: mt7921: fix a potential clc buffer length underflow

En bref

Sévérité
Non disponible
EPSS
EPSS 0.13 % · centile 3 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Undergoing Analysis

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in CLC. This underflow leads to an almost infinite loop or an invalid power setting resulting in driver initialization failure.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 0c9318d49e501a5d50b02bd91a4813bde2353488 < 2a79b1a492bcfa725383b6580cd93a6862308c85 ; affected 15173a1697236793e9e900b82fece6f99d41b2a7 < e451c325b000b9a0081fd93bc6d103d6943d4b55 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 90cc573fd2f46ddbc2c329e7814b5ba3deb7b939 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 0aa63d33742b805d1a218d18d12b983cce4b2f7b ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < a0111847f0b4f6023f6dd320114697514e024ba3 ; affected fa6ad88e023ddfa6c5dcdb466d159e89f451e305 < 5373f8b19e568b5c217832b9bbef165bd2b2df14
Linux · Linuxaffected 6.8 ; unaffected 0 < 6.8 ; unaffected 6.1.175 ≤ 6.1.* ; unaffected 6.6.140 ≤ 6.6.* ; unaffected 6.12.88 ≤ 6.12.* ; unaffected 6.18.30 ≤ 6.18.*

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD