CVE-2026-98159
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
wifi: mt76: mt7921: validate CLC firmware records
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 46673662402884ca55a869e4ebe956e08e8b6b05 | Unavailable | None listed |
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 740272d46ffc8231709a5e774cf5e4a5785b8a02 | Unavailable | None listed |
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 602a950134ee2940136f60797e4457c3983b06ce | Unavailable | None listed |
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 3896be051e928c891922d91de94c99519d215dff | Unavailable | None listed |
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 3c505e2af16a9320f4355218394a955fbbc65322 | Unavailable | None listed |
| 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 | affected | git | 9417c5818a0146980c2608fda94c908e604eb033 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.1 | Unavailable | None listed |
| 6.1.189 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.158 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.111 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.53 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.7 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |