CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's mt76 driver for the mt7996 Wi-Fi chip, where the default EEPROM firmware size is not properly validated, potentially allowing a truncated firmware file to be processed. This flaw could lead to buffer overflows, resulting in undefined behavior or system crashes. Linux system administrators and developers utilizing the mt7996 chipset should prioritize applying the relevant patches to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.