Medium 5.5Published Sep 25, 2026

CVE-2026-98159wifi: mt76: mt7921: validate CLC firmware records

Updated under an hour ago (Oct 27, 2026, 1:10 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 46673662402884ca55a869e4ebe956e08e8b6b05; from 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 740272d46ffc8231709a5e774cf5e4a5785b8a02; from 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 602a950134ee2940136f60797e4457c3983b06ce; from 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 3896be051e928c891922d91de94c99519d215dff; 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 builds before 3c505e2af16a9320f4355218394a955fbbc65322; from 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 before 9417c5818a0146980c2608fda94c908e604eb033	CNA record
linux linux_kernel linux:linux_kernel	from 6.1 before 6.1.189; from 6.6 before 6.6.158; from 6.12 before 6.12.111; from 6.18 before 6.18.53; from 7.2 before 7.2.7	NVD

References

References

https://git.kernel.org/stable/c/46673662402884ca55a869e4ebe956e08e8b6b05	patch
https://git.kernel.org/stable/c/740272d46ffc8231709a5e774cf5e4a5785b8a02	patch
https://git.kernel.org/stable/c/602a950134ee2940136f60797e4457c3983b06ce	patch
https://git.kernel.org/stable/c/3896be051e928c891922d91de94c99519d215dff	patch
https://git.kernel.org/stable/c/3c505e2af16a9320f4355218394a955fbbc65322	patch
https://git.kernel.org/stable/c/9417c5818a0146980c2608fda94c908e604eb033	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.