Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-23325

24
FAUCET Score

CVE-2026-23325 identifies an out-of-bounds (OOB) access vulnerability within the Linux kernel's mt76 mt7996 Wi-Fi driver. This flaw, located in the mt7996_mac_write_txwi_80211 function, stems from a failure to check frame length before accessing management fields. While specific attack vectors and complexity are not detailed, such OOB issues could potentially lead to denial of service or information disclosure. The absence of a CVSS score and a low FAUCET Risk Score of 20.0/100 suggest a moderate to low immediate severity. There is no evidence of active exploitation, and no public exploit code is available. Community discussion and media coverage remain minimal, indicating low current attention to this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.2.1, < 6.6.130CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.77CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.13, < 6.18.17CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.19, < 6.19.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.13%
Probability of exploitation in next 30 days
EPSS Percentile
2.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0013 is in the 12th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (22)

ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1064.72~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1056.57~22.04.2
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-136.136
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1064.72
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1059.67
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1046.50
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1056.57
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1064.72+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1059.62~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1059.62
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1059.62.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-136.136.2~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-136.136+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-136.136.2
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.8 (jammy)Fixed in: 6.8.0-1062.69~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1063.71+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (noble)Fixed in: 6.8.0-1062.69
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1063.71~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1063.71
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1061.64

Vendor Advisories (11)

ubuntuUSN-8609-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8608-1

Linux kernel (Azure FIPS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8607-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8606-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8595-2

Linux kernel (AWS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8596-1

Linux kernel (NVIDIA) vulnerabilities

Jul 23, 2026
ubuntuUSN-8595-1

Linux kernel (Oracle) vulnerabilities

Jul 23, 2026
ubuntuUSN-8574-2

Linux kernel vulnerabilities

Jul 23, 2026
ubuntuUSN-8574-1

Linux kernel (GCP FIPS) vulnerabilities

Jul 21, 2026
ubuntuUSN-8567-1

Linux kernel vulnerabilities

Jul 20, 2026
microsoft2026-Mar/CVE-2026-23325Important

wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()

Mar 10, 2026

References

git.kernel.org / stable/c/45661d22639c4b747ef1bd0822b8e76e421a808a
Patch
git.kernel.org / stable/c/60862846308627e9e15546bb647a00de44deb27b
Patch
git.kernel.org / stable/c/a6605f61913155e130bfd04d438c3ce1a572fb0f
Patch
git.kernel.org / stable/c/ca1adc04fc2cb1d9f1842e429debe6a520d54966
Patch
git.kernel.org / stable/c/f4cdf6b43689e901a341e7147fcfb25057c38eae
Patch