wifi: mt76: mt7915: guard HE capability lookups (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.
References
- https://git.kernel.org/stable/c/8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67
- https://git.kernel.org/stable/c/23a2b98e754da04e0e90314d5fa8ca44349590fb
- https://git.kernel.org/stable/c/a031f454f14e3e76ad03bcb23918e1a82b4b0869
- https://git.kernel.org/stable/c/871549814eb4da081f1e93cc0c7ea626a310a966
- https://git.kernel.org/stable/c/6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e
- https://git.kernel.org/stable/c/8e9db062654a388d0fa587acbeeae68dd33eba41
European references
- ENISA EUVD · EUVD-2026-55411
- GCVE · GCVE-0-2026-68310
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1202 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1164 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1069 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < 8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67 ; affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < 23a2b98e754da04e0e90314d5fa8ca44349590fb ; affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < a031f454f14e3e76ad03bcb23918e1a82b4b0869 ; affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < 871549814eb4da081f1e93cc0c7ea626a310a966 ; affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e ; affected e6d557a78b6016eee7b9cd6832343efd32cc0b27 < 8e9db062654a388d0fa587acbeeae68dd33eba41 |
| Linux · Linux | affected 5.18 ; unaffected 0 < 5.18 ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.148 ≤ 6.6.* ; unaffected 6.12.101 ≤ 6.12.* ; unaffected 6.18.42 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |