The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a corrupted frame can report a length larger than the received buffer. The bounds check correctly discards such frames, but its WARN_ON_ONCE wrapper means any over-the-air garbage frame taints the kernel, and panics it on the first such frame when panic_on_warn is set.
Drop the WARN and discard the frame silently, matching what commit c2d4c8723dbf ("mt76x2: remove some harmless WARN_ONs in tx status and rx path") did for the neighboring rx and tx status paths.
Observed immediately on rx with an MT7612U in fcsfail monitor mode on a busy channel.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Sep 30, 2026 | Sep 17, 2026 |
| Ubuntu | — | Upgrade linux-oem-7.0Upgrade linux-intel-iotg-5.15Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-gkeUpgrade linux-hwe-7.0Upgrade linux-hwe-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-riscvUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-nvidia-tegraUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-ibm-5.15Upgrade linux-riscv-7.0Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-azure-fde-5.15 | Nov 3, 2026 | Sep 17, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 30, 2026 | Sep 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub