CVE-2026-23315

HIGH
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2026-03-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access. [fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

Weakness Classification (1)

Affected Software (16)

VendorProductVersion
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 84419556359bc96d3fe1623d47a64c86542566cc
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 7ae7b093b7dba9548a3bc4766b9364b97db4732d
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 7b692dff8df0ba5feb8df00f27d906d6eb1fe627
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 9612d91f617231e03c49cb9b0c02f975a3b4f51f
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 0fb3b94a9431a3800717e5c3b6fa2e1045a15029
Linux Linux 577dbc6c656da6997dddc6cf842b7954588f2d4e < 4e10a730d1b511ff49723371ed6d694dd1b2c785
Linux Linux 5.10
linux linux_kernel 5.10.1 – 6.1.167
linux linux_kernel 5.10
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001310
Percentile 2.7%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00131
2026-11-05
0.00131

Intelligence Sources

mitre ref →
nvd ref →