All vulnerabilities
CVE-2026-98159

Linux: wifi: mt76: mt7921: validate CLC firmware records

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in46673662402884ca55a869e4ebe956e08e8b6b05Also 740272d46ffc8231709a5e774cf5e4a5785b8a02, 602a950134ee2940136f60797e4457c3983b06ce and 3 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 46673662402884ca55a869e4ebe956e08e8b6b05LinuxCVE List
  • 740272d46ffc8231709a5e774cf5e4a5785b8a02LinuxCVE List
  • 602a950134ee2940136f60797e4457c3983b06ceLinuxCVE List
  • 3896be051e928c891922d91de94c99519d215dffLinuxCVE List
  • 3c505e2af16a9320f4355218394a955fbbc65322LinuxCVE List
  • 9417c5818a0146980c2608fda94c908e604eb033LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: validate CLC firmware records

The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.

Text from CVE List

Affected versions 14

  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 46673662402884ca55a869e4ebe956e08e8b6b05CVE List
  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 740272d46ffc8231709a5e774cf5e4a5785b8a02CVE List
  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 602a950134ee2940136f60797e4457c3983b06ceCVE List
  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 3896be051e928c891922d91de94c99519d215dffCVE List
  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 3c505e2af16a9320f4355218394a955fbbc65322CVE List
  • Linuxaffected: 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 9417c5818a0146980c2608fda94c908e604eb033CVE List
  • Linuxaffected: 6.1CVE List
  • Linuxunaffected: all versions before 6.1CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6