wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 11 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] band_idx comes from a 2-bit descriptor field (0-3) and was used directly to index dev->mt76.phys[] (size __MT_MAX_BAND == 3) and dereference the result. A corrupt or reserved descriptor value could index out of bounds or hit a NULL phy on parts with fewer bands. Reject invalid band indices, mirroring mt7996_rx_get_wcid().
Références
- https://git.kernel.org/stable/c/493a029c205a994644327d554f0cfeb9651aba7c
- https://git.kernel.org/stable/c/535091c587268cc783608642838a655d828eefdd
- https://git.kernel.org/stable/c/0f53ece876e1f3bbb3e18f48afc4af1ee967b16c
- https://git.kernel.org/stable/c/b1c5cf8903bec5476a2233b4e45287b9a2213e02
- https://git.kernel.org/stable/c/2243778a5fae8329ab5f18e7adcd7e03b911a1b7
Références européennes
- ENISA EUVD · EUVD-2026-82035
- GCVE · GCVE-0-2026-90374
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 98686cd21624c75a043e96812beadddf4f6f48e5 < 493a029c205a994644327d554f0cfeb9651aba7c ; affected 98686cd21624c75a043e96812beadddf4f6f48e5 < 535091c587268cc783608642838a655d828eefdd ; affected 98686cd21624c75a043e96812beadddf4f6f48e5 < 0f53ece876e1f3bbb3e18f48afc4af1ee967b16c ; affected 98686cd21624c75a043e96812beadddf4f6f48e5 < b1c5cf8903bec5476a2233b4e45287b9a2213e02 ; affected 98686cd21624c75a043e96812beadddf4f6f48e5 < 2243778a5fae8329ab5f18e7adcd7e03b911a1b7 |
| Linux · Linux | affected 6.2 ; unaffected 0 < 6.2 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.110 ≤ 6.12.* ; unaffected 6.18.52 ≤ 6.18.* ; unaffected 7.2.6 ≤ 7.2.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |