CVE-2026-46136: wifi: mt76: mt7921: fix a potential clc buffer length underflow
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix a potential clc buffer length underflow
The buflen is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in CLC.
This underflow leads to an almost infinite loop or an invalid power setting resulting in driver initialization failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46136?
The severity of CVE-2026-46136 is rated as high with a score of 7.8.
What systems are affected by CVE-2026-46136?
CVE-2026-46136 affects the Linux kernel and specifically impacts systems utilizing the mt76/mt7921 driver.
How do I fix CVE-2026-46136?
To fix CVE-2026-46136, you should update the Linux kernel to a patched version that addresses the buffer length underflow issue.
What type of vulnerability is CVE-2026-46136?
CVE-2026-46136 is a buffer length underflow vulnerability that can potentially lead to system crashes.
When was CVE-2026-46136 published?
CVE-2026-46136 was published on May 28, 2026.