Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 17:52:54 +0000 CVE-2026-90382 — wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length https://db.gcve.eu/vuln/cve-2026-90382 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length</p> <p>The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a corrupted frame can report a length larger than the received buffer. The bounds check correctly discards such frames, but its WARN_ON_ONCE wrapper means any over-the-air garbage frame taints the kernel, and panics it on the first such frame when panic_on_warn is set.</p> <p>Drop the WARN and discard the frame silently, matching what commit c2d4c8723dbf (&#34;mt76x2: remove some harmless WARN_ONs in tx status and rx path&#34;) did for the neighboring rx and tx status paths.</p> <p>Observed immediately on rx with an MT7612U in fcsfail monitor mode on a busy channel.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length</p> <p>The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a corrupted frame can report a length larger than the received buffer. The bounds check correctly discards such frames, but its WARN_ON_ONCE wrapper means any over-the-air garbage frame taints the kernel, and panics it on the first such frame when panic_on_warn is set.</p> <p>Drop the WARN and discard the frame silently, matching what commit c2d4c8723dbf (&#34;mt76x2: remove some harmless WARN_ONs in tx status and rx path&#34;) did for the neighboring rx and tx status paths.</p> <p>Observed immediately on rx with an MT7612U in fcsfail monitor mode on a busy channel.</p> https://db.gcve.eu/vuln/cve-2026-90382