CVE-2026-80935: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996mcugeteeprom derives the destination of the EFUSE/EXT block copy from the address reported by the MCU response event-addr, a device-controlled le32 a...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the mt7996mcugeteeprom function does not perform boundary checks on the device EEPROM addresses in the MCU responses. Malicious or faulty devices can report any address, leading to out-of-bounds writes...