CVE-2026-98159

Katalog CVE

CVSS 5.5 · Medium EPSS 0,11%

Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.

Rincian

Terbit di NVD

25 September 2026

Terakhir diubah

14 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,11% peluang dieksploitasi; lebih tinggi dari 1,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3896be051e928c891922d91de94c99519d215dff patch
• https://git.kernel.org/stable/c/3c505e2af16a9320f4355218394a955fbbc65322 patch
• https://git.kernel.org/stable/c/46673662402884ca55a869e4ebe956e08e8b6b05 patch
• https://git.kernel.org/stable/c/602a950134ee2940136f60797e4457c3983b06ce patch
• https://git.kernel.org/stable/c/740272d46ffc8231709a5e774cf5e4a5785b8a02 patch
• https://git.kernel.org/stable/c/9417c5818a0146980c2608fda94c908e604eb033 patch