CVE-2026-80933

Received Received - Intake

Buffer Overflow in Linux Kernel MT76 WiFi Driver

Publication date: 2026-09-11

Last updated on: 2026-09-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-14

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-80933

EUVD

EUVD-2026-76256

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the mt76 driver for MediaTek MT7996 Wi-Fi chips. The issue occurs when parsing the default EEPROM firmware, which is copied without validating its size. A truncated firmware file could cause the driver to read beyond the allocated buffer during variant validation or fallback copy operations.

Detection Guidance

This vulnerability affects the Linux kernel's mt76 driver for MT7996 WiFi devices. Detection requires checking kernel logs for firmware loading errors or crashes related to mt76. Monitor dmesg for errors like 'firmware: failed to load mt7996' or buffer overflow warnings. Ensure firmware files in /lib/firmware/mt7996/ are not truncated and match expected size MT7996_EEPROM_SIZE.

Impact Analysis

An attacker could exploit this by providing a maliciously crafted truncated firmware file, potentially leading to memory corruption, crashes, or arbitrary code execution on affected systems. This could compromise system integrity or enable denial-of-service attacks.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is specific to the Linux kernel's wifi driver (mt76: mt7996) and involves a buffer overflow risk during EEPROM firmware parsing. There is no evidence in the provided context linking it to data protection or privacy regulations.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for CVE-2026-80933. Specifically, ensure the mt76 driver for mt7996 devices is updated to reject EEPROM firmware files shorter than MT7996_EEPROM_SIZE before parsing.

Hi! I’m here to help you understand CVE-2026-80933. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70