CVE-2026-80933

Received Received - Intake

Buffer Overflow in Linux Kernel MT76 WiFi Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-80933

EUVD

EUVD-2026-76256

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the mt76 driver for MediaTek MT7996 Wi-Fi chips. The issue occurs when parsing the default EEPROM firmware, which is copied without validating its size. A truncated firmware file could cause the driver to read beyond the allocated buffer during variant validation or fallback copy operations.

Impact Analysis

An attacker could exploit this by providing a maliciously crafted truncated firmware file, potentially leading to memory corruption, crashes, or arbitrary code execution on affected systems. This could compromise system integrity or enable denial-of-service attacks.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for CVE-2026-80933. Specifically, ensure the mt76 driver for mt7996 devices is updated to reject EEPROM firmware files shorter than MT7996_EEPROM_SIZE before parsing.

Hi! I’m here to help you understand CVE-2026-80933. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70