Riskcovery

CVE-2026-74322

wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()

For injected frames (e.g. via radiotap), mac80211 can pass info->control.vif = NULL, as explicitly noted in struct ieee80211_tx_info. Check vif pointer before executing ieee80211_vif_is_mld() in mt7996_mac_write_txwi_80211 routine in order to avoid a possible NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f0b0b239b8f36cdc55cf0bc1bac75ec07fc9fef1 to before dfb27e5dd9e4d34fbb74fa834c644dcef0be2be9Affected
  • f0b0b239b8f36cdc55cf0bc1bac75ec07fc9fef1 to before 63e6151b9791b31877a88ff62806e7c407683955Affected
  • f0b0b239b8f36cdc55cf0bc1bac75ec07fc9fef1 to before 61370e6674b5253de5686813ceeceebc35a7d3e5Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.