Linux Kernel Vulnerability in mt76 Wi-Fi Driver Affecting Firmware Management

CVE-2026-98159

What is CVE-2026-98159?

A vulnerability exists in the mt76 Wi-Fi driver of the Linux kernel where the firmware loader fails to adequately validate CLC region records provided by firmware. This oversight can lead to improper dereferencing of pointers, resulting in potential buffer overflows or corruption. Specifically, a malformed firmware image may cause record indexing errors, allowing exploiters to manipulate memory access. It is critical for users relying on this driver to ensure their systems are updated to mitigate associated risks.

References