← CVE Intelligence

CVE-2026-23315

wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access. [fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 84419556359bc96d3fe1623d47a64c86542566cc; affected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 7ae7b093b7dba9548a3bc4766b9364b97db4732d; affected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 7b692dff8df0ba5feb8df00f27d906d6eb1fe627; affected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 9612d91f617231e03c49cb9b0c02f975a3b4f51f; affected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 0fb3b94a9431a3800717e5c3b6fa2e1045a15029; affected 577dbc6c656da6997dddc6cf842b7954588f2d4e before 4e10a730d1b511ff49723371ed6d694dd1b2c785
Linux / Linuxaffected 5.10; unaffected 0 before 5.10; unaffected 6.1.167 through 6.1.*; unaffected 6.6.130 through 6.6.*; unaffected 6.12.77 through 6.12.*; unaffected 6.18.17 through 6.18.*; unaffected 6.19.7 through 6.19.*; unaffected 7.0 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

siemens-SADP

No English description supplied.