207 matches found
CVE-2026-72008
A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...
CVE-2026-63862
A flaw was found in the Linux kernel's MediaTek PCIe Peripheral Component Interconnect Express generation 3 driver. This vulnerability occurs because interrupt request IRQ domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the incorrect labeling of the mtkgate structure in the Mediatek clock-gated driver as initconst...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability stems from the svsenable DebugWrite function in the mediatek SVS driver, which fails when the...
Mediatek wireless driver Heap Buffer Overflow DoS
The vulnerability of the mt7996rxgetwcid function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c module of the Mediatek wireless adapter driver in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker...
Mediatek wireless DoS
The vulnerability of the mt7925mcuhwscan function in the drivers/net/wireless/mediatek/mt76/mt7925/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cau...
Mediatek wireless MT7996 Buffer Overflow DoS
The vulnerability of the mt7996tx function in the drivers/net/wireless/mediatek/mt76/mt7996/main.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...
Mediatek Linux Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the mt7601urxnextseglen function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the Mediatek wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...
Mediatek wireless driver Kernel Data Compromise
The vulnerability of the mt7921usbsdiotxprepareskb function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c file of the Mediatek wireless communication adapter driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker ...
Mediatek wireless MT76 MCU Function Heap Overflow DoS
The vulnerability of the mt7996mcuexit function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c file of the Mediatek wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004229)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004229 advisory. An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fixed device use-after-free issues during unbind operations. A recent change addressed device reference leaks when querying DRM platform device driver data during bind operations. However, a partial fix previously...
CVE-2018-9395
In mtkcfg80211vendorpacketkeepalivestart and mtkcfg80211vendorsetconfig of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glvendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...
UBUNTU-CVE-2025-68298
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusbmtkclaimisointf NULL deref In btusbmtksetup, we set btmtkdata-isopktintf to: usbifnumtoifdata-udev, MTKISOIFNUM That function can return NULL in some cases. Even when it returns NULL, though...
CVE-2025-68184
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 "drm/mediatek: Add AFBC support to Mediatek DRM driver" added AFBC support to Mediatek DRM and enabled the 32x8/split/sparse modifier. However, this is...
mediatek vdec_av1_slice_free_working_buffer Heap Buffer Overflow DoS
Vulnerability of the vdecav1slicefreeworkingbuffer function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdecav1reqlatif.c module – Linux kernel-based multimedia device support drivers are vulnerable to a vulnerability where previously released memory is re-allocated. Exploiting thi...
mt7915_getPhyMode Heap Buffer Overflow DoS
The vulnerability of the mt7915getPhyMode function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the wireless adapter support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Added error handling for the old state CRTC in atomicdisable. Introduced error handling to address a issue where, after a hotplug event, the cursor continues to update. This situation can lead to a kernel panic d...
PT-2025-49445
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/mediatek subsystem that could lead to a use-after-free condition during device unbinding. A recent fix for device reference leaks during bind...
