Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90369

wifi: mt76: fix out-of-bounds access in mmio copy helpers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix out-of-bounds access in mmio copy helpers mt76_mmio_write_copy() and mt76_mmio_read_copy() iterate up to ALIGN(len, 4), so a length that is not a multiple of four reads past the source buffer (write_copy) or writes past the destination (read_copy). Copy the aligned body in the loop and handle the remaining tail through a 4-byte bounce buffer, keeping the register access width unchanged.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2df00805f7dbaa46b60c682aad0d76270b7ba266 to < 6ed0fba58bb125a8d8de96e391aa86111166efcaaffected
  • 2df00805f7dbaa46b60c682aad0d76270b7ba266 to < 6689b4a65e88d7b019e687fa9d6943ca070f3e43affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References