EUVD-2026-59470
GHSA-34gf-qwwx-pv6w
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Adjacent WiFi vector (AV:A), no auth needed (PR:N), but impact is availability-only (A:H); no credible confidentiality or integrity impact from a TX token leak.
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()
If link_conf or link_sta lookup fails in mt7996_tx_prepare_skb routine, mt7996 driver leaks an already allocated tx token. Fix the issue releasing the token in case of error.
AnalysisAI
Token resource leak in the Linux kernel mt7996 WiFi driver (mt76 subsystem) allows an adjacent unauthenticated attacker to exhaust TX tokens by repeatedly triggering failed link_conf or link_sta lookups in mt7996_tx_prepare_skb(), potentially degrading or crashing WiFi functionality on affected devices. The provided CVSS 8.8 score with C:H/I:H/A:H is notably high for what the description characterizes as a resource management bug; the actual impact most closely aligns with denial-of-service through token exhaustion, not direct confidentiality or integrity compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be within WiFi radio range (adjacent network, per AV:A in the CVSS vector) of the target device - remote Internet-based exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 8.8 vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) is inconsistent with the described vulnerability class. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to a fixed Linux kernel version: 7.1.5 or later for the 7.1.x stable series, 6.18.40 or later for the 6.18.x longterm series, or 7.2-rc1 or later for mainline. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running the affected Linux kernel versions and assess WiFi driver exposure in inventory management systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today