5 matches found
wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000416)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000416 advisory. An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized...
wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
...
UBUNTU-CVE-2021-47033
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix tx skb dma unmap The first pointer in the txp needs to be unmapped as well, otherwise it will leak DMA mapping entries...
kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c
A memory overflow and data corruption flaw were found in the Mediatek MT76 driver module for WiFi in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c. An oversized packet with too many rx fragments causes an overflow and corruption in memory of adjacent pages. A local attacker with a...