CVE-2026-46136CWE-787

CVE-2026-46136

High · published May 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix a potential clc buffer length underflow

The buf_len is used to limit the iterations for retrieving the country

power setting and may underflow under certain conditions due to changes

in the power table in CLC.

This underflow leads to an almost infinite loop or an invalid power

setting resulting in driver initialization failure.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-05-28T14:16Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.75, < 6.1.1756.1.175
linux/linux_kernel≥ 6.6.14, < 6.6.1406.6.140
linux/linux_kernel≥ 6.7.2, < 6.12.886.12.88
linux/linux_kernel≥ 6.13, < 6.18.306.18.30
linux/linux_kernel≥ 6.19, < 7.0.77.0.7
References (7)
EPSS history
Timeline
  • 28 MAY 09:35Z
    wifi: mt76: mt7921: fix a potential clc buffer length underflow
    cvelistv5