VDB

CVE-2026-80933

CVE-2026-80933 PUBLISHED CVSS 7.8 HIGH

Reported by Linux · Published September 11, 2026

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

EPSS 0.13% · 2.8th percentile

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
2.8th percentile

Affected Products

VendorProductVersions
LinuxLinux98686cd21624c75a043e96812beadddf4f6f48e5, 98686cd21624c75a043e96812beadddf4f6f48e5, 98686cd21624c75a043e96812beadddf4f6f48e5
LinuxLinux6.2, 0, 6.6.157
linuxlinux_kernel6.2, 6.2, 6.2
LinuxLinux98686cd21624c75a043e96812beadddf4f6f48e5, 98686cd21624c75a043e96812beadddf4f6f48e5, 98686cd21624c75a043e96812beadddf4f6f48e5

Timeline

  • Sep 11, 2026 CVE Published
  • Sep 12, 2026 EPSS Score
  • Sep 12, 2026 Coalition ESS Score
  • Sep 13, 2026 EPSS Score
  • Sep 14, 2026 CVE Updated
  • Sep 15, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›