175 matches found
CVE-2026-72008
A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...
CVE-2026-63862
A flaw was found in the Linux kernel's MediaTek PCIe Peripheral Component Interconnect Express generation 3 driver. This vulnerability occurs because interrupt request IRQ domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability stems from the svsenable DebugWrite function in the mediatek SVS driver, which fails when the...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the incorrect labeling of the mtkgate structure in the Mediatek clock-gated driver as initconst...
The vulnerability of the mt7996_rx_get_wcid() function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c module of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the mt7996rxgetwcid function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c module of the Mediatek wireless adapter driver in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker...
The vulnerability of the mt7996_tx() function in the drivers/net/wireless/mediatek/mt76/mt7996/main.c file of the Mediatek wireless communication adapter driver driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt7996tx function in the drivers/net/wireless/mediatek/mt76/mt7996/main.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the mt7925_mcu_hw_scan() function in the drivers/net/wireless/mediatek/mt76/mt7925/mcu.c file of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt7925mcuhwscan function in the drivers/net/wireless/mediatek/mt76/mt7925/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cau...
The vulnerability of the mt7601u_rx_next_seg_len() function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mt7601urxnextseglen function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the Mediatek wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the mt7921_usb_sdio_tx_prepare_skb() function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c module of the Mediatek wireless communication adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mt7921usbsdiotxprepareskb function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c file of the Mediatek wireless communication adapter driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker ...
Vulnerability of the mt7996_mcu_exit() function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c file of the Mediatek wireless communication adapter driver. This vulnerability allows a hacker to cause a service failure.
The vulnerability of the mt7996mcuexit function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004229)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004229 advisory. An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fixed device use-after-free issues during unbind operations. A recent change addressed device reference leaks when querying DRM platform device driver data during bind operations. However, a partial fix previously...
CVE-2018-9395
In mtkcfg80211vendorpacketkeepalivestart and mtkcfg80211vendorsetconfig of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glvendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...
UBUNTU-CVE-2025-68298
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusbmtkclaimisointf NULL deref In btusbmtksetup, we set btmtkdata-isopktintf to: usbifnumtoifdata-udev, MTKISOIFNUM That function can return NULL in some cases. Even when it returns NULL, though...
CVE-2025-68184
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 "drm/mediatek: Add AFBC support to Mediatek DRM driver" added AFBC support to Mediatek DRM and enabled the 32x8/split/sparse modifier. However, this is...
Vulnerability of the vdec_av1_slice_free_working_buffer() function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_av1_req_lat_if.c file – A driver for supporting multimedia devices in Linux kernels, which allows a hacker to cause a service failure.
Vulnerability of the vdecav1slicefreeworkingbuffer function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdecav1reqlatif.c module – Linux kernel-based multimedia device support drivers are vulnerable to a vulnerability where previously released memory is re-allocated. Exploiting thi...
The vulnerability of the mt7915_getPhyMode() function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt7915getPhyMode function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the wireless adapter support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Added error handling for the old state CRTC in atomicdisable. Introduced error handling to address a issue where, after a hotplug event, the cursor continues to update. This situation can lead to a kernel panic d...
PT-2025-49445
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/mediatek subsystem that could lead to a use-after-free condition during device unbinding. A recent fix for device reference leaks during bind...
