26 matches found
CVE-2026-90357
A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt76: mt7915 driver. This vulnerability occurs when a Target Wake Time TWT flow is added to an internal list but not correctly unlinked if the firmware rejects the agreement. This improper handling can lead to the reu...
PT-2026-94716
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver within the mt76 wifi subsystem. When the mt76 wcid alloc function fails, the mt7915 add interface function returns without clearing the vif mask and...
PT-2026-94705
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver of the mt76 wifi module where a Target Wake Time TWT flow is added to dev-twt list before the agreement is sent to the firmware. If the MCU rejects t...
PT-2026-94702
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver where the mt7915 pci init hif2 function is called unconditionally and then called again within the WED-inactive branch. This results in the global hi...
CVE-2026-80937
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data buffer at the offset reported by the MCU response res-addr, a...
CVE-2026-80937
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data buffer at the offset reported by the MCU response res-addr, a...
CVE-2026-80937
CVE-2026-80937 is an out-of-bounds write in the Linux kernel's mt76 Wi-Fi driver for mt7915 chipsets. The function mt7915_mcu_get_eeprom() copies a 16-byte EFUSE block into the driver's eeprom.data buffer at an offset supplied by the device MCU (res->addr), a device-controlled __le32, without ...
CVE-2026-80937 wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data buffer at the offset reported by the MCU response res-addr, a...
CVE-2026-80937 wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915mcugeteeprom copies a fixed EFUSE block into the driver's dev-mt76.eeprom.data buffer at the offset reported by the MCU response res-addr, a...
PT-2026-69710
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 wireless driver where the functions mt7915 mcu bss he tlv and mt7915 mcu sta bfer tlv dereference the HE PHY capability returned by mt76 connac get he phy...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988921)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988921 advisory. In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986908)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986908 advisory. In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer...
Linux Distros Unpatched Vulnerability : CVE-2021-47540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointe...
Linux Distros Unpatched Vulnerability : CVE-2025-38155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915mmiowedinit devmioremap returns NULL on erro...
CVE-2025-38155
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915mmiowedinit devmioremap returns NULL on error. Currently, mt7915mmiowedinit does not check for this case, which results in a NULL pointer dereference. Prevent null pointer dereferen...
SUSE CVE-2021-47540
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer dereference in mt7915getphymode routine adding an ibss interface to the mt7915 driver. 101.137097 wlan0: Trigger new scan to find an IB...
CVE-2021-47540
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer dereference in mt7915getphymode routine adding an ibss interface to the mt7915 driver. 101.137097 wlan0: Trigger new scan to find an IB...
CVE-2021-47540
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer dereference in mt7915getphymode routine adding an ibss interface to the mt7915 driver. 101.137097 wlan0: Trigger new scan to find an IB...
DEBIAN-CVE-2021-47540
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer dereference in mt7915getphymode routine adding an ibss interface to the mt7915 driver. 101.137097 wlan0: Trigger new scan to find an IB...
CVE-2021-47540
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer dereference in mt7915getphymode routine adding an ibss interface to the mt7915 driver. 101.137097 wlan0: Trigger new scan to find an IB...