Riskcovery

CVE-2026-98159

wifi: mt76: mt7921: validate CLC firmware records

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: validate CLC firmware records

The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 46673662402884ca55a869e4ebe956e08e8b6b05Affected
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 740272d46ffc8231709a5e774cf5e4a5785b8a02Affected
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 602a950134ee2940136f60797e4457c3983b06ceAffected
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 3896be051e928c891922d91de94c99519d215dffAffected
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 3c505e2af16a9320f4355218394a955fbbc65322Affected
  • 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to before 9417c5818a0146980c2608fda94c908e604eb033Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.