CVE-2026-46136

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buf_len is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in CLC. This underflow leads to an almost infinite loop or an invalid power setting resulting in driver initialization failure.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

CWE

CWE-787

Published

2026-05-28

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/0aa63d33742b805d1a218d18d12b983cce4b2f7b
• https://git.kernel.org/stable/c/2a79b1a492bcfa725383b6580cd93a6862308c85
• https://git.kernel.org/stable/c/5373f8b19e568b5c217832b9bbef165bd2b2df14
• https://git.kernel.org/stable/c/90cc573fd2f46ddbc2c329e7814b5ba3deb7b939
• https://git.kernel.org/stable/c/a0111847f0b4f6023f6dd320114697514e024ba3

Check your stackJSON