Riskcovery

CVE-2026-80933

wifi: mt76: mt7996: validate default EEPROM firmware size

State
Published
Severity
7.8 High
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: validate default EEPROM firmware size

The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy.

Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before b4bf67cc0871b13103c404b38e332b9d4403a0daAffected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 127a291f4c8069a4e71906938402cacfe24ee8cdAffected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 03b81f015dbb29807ce1ec6d45537d658abdac69Affected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 7074ec3769820302f1ccf8794a40a6582153b820Affected
  • 98686cd21624c75a043e96812beadddf4f6f48e5 to before 653c6e289b13cc6942f3e8f8e3c568e70fa42d1fAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.