CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Security Researcher: Jacob Archuleta @nullze 📝 Vulnerability Overview A critical Denial of Service DoS vulnerability was discovered in the Tesla Model 3, Model S, and Model X all versions prior to 2020.4.10. This vulnerability allowed a remo...

CVE-2026-90376

A flaw was found in the MediaTek mt76 Wi-Fi driver within the Linux kernel. An incorrect Multi-Link Device MLD ID in the MAC Transmit Descriptor TXD and Host Interface Transmit Packet HIF TXP can cause the firmware to enter a busy loop. This issue occurs when a third MLD link is in power saving...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mt76: mt76x02u: fixed a possible memory leak in mt76x02umcusendmsg. Free the skb if mt76ubulkmsg fails in the mt76x02umcusendmsg routine...

DEBIAN-CVE-2026-90376

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is normal, and the firmware keeps showing the error log "ERROR!! NO PAUSE...". Root cause: If the MLDID field in the TXD ...

CVE-2026-90376

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is normal, and the firmware keeps showing the error log "ERROR!! NO PAUSE...". Root cause: If the MLDID field in the TXD ...

CVE-2026-90376 wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is normal, and the firmware keeps showing the error log "ERROR!! NO PAUSE...". Root cause: If the MLDID field in the TXD ...

CVE-2026-90376 wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP Problem: MCU command timeout while the firmware state is normal, and the firmware keeps showing the error log "ERROR!! NO PAUSE...". Root cause: If the MLDID field in the TXD ...

EUVD-2026-82018

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement The flow is added to dev-twtlist before sending the agreement to the firmware, but the error path leaves it linked while flowidmask is never set. The flow slot...

PT-2026-94718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 mcu get chip config function within the mt76 wifi driver. The response Type-Length-Value TLV loop advances by the tlv-len value without a minimum threshold,...

PT-2026-94720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow occurs in the mt7915 mcu get sta nss function within the mt76 wifi driver. When a peer's VHT/HE MCS map contains no supported spatial streams, the loop terminates wi...

PT-2026-94724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver where an incorrect MLD ID field in the TXD Transmit Descriptor can cause a firmware busy loop when a third link is in power saving mode. This leads t...

SUSE CVE-2026-80975

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char rxQNAPMCURXBUFFERSIZE; ... reply-data = rx; reply-length = length; and qnapmcureceivebu...

Linux Distros Unpatched Vulnerability : CVE-2026-80975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char...

Linux Distros Unpatched Vulnerability : CVE-2026-80934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC- TXP for AddBA req action frames MTTXD7MACTXD, set in...

Linux Distros Unpatched Vulnerability : CVE-2026-80937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data...

Linux Distros Unpatched Vulnerability : CVE-2026-80935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996mcugeteeprom derives the destination of the EFUSE/EXT block copy from the addres...

CVE-2026-80975

A flaw was found in the Linux kernel's qnap-mcu driver. This vulnerability occurs when the driver processes commands and a reply from the Microcontroller Unit MCU arrives after a command has timed out or failed. The driver may write this late or unsolicited message into a memory area that is no...

DEBIAN-CVE-2026-80975

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char rxQNAPMCURXBUFFERSIZE; ... reply-data = rx; reply-length = length; and qnapmcureceivebu...

CVE-2026-80975

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char rxQNAPMCURXBUFFERSIZE; ... reply-data = rx; reply-length = length; and qnapmcureceivebu...

UBUNTU-CVE-2026-80975

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an on-stack buffer to the receive path: unsigned char rxQNAPMCURXBUFFERSIZE; ... reply-data = rx; reply-length = length; and qnapmcureceivebu...