Wind River Support Network

HomeDefectsLIN1022-36023

Fixed

LIN1022-36023 : Security Advisory - linux - CVE-2026-80933

Created: Oct 7, 2026 Updated: Oct 8, 2026

Resolved Date: Oct 8, 2026

Found In Version: 10.22.33.2

Fix Version: 10.22.33.11

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  wifi: mt76: mt7996: validate default EEPROM firmware size  The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy.  Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)