Vulnerability feed

Executive summary

The advisory describes a fix in the Linux kernel's mt76 wireless driver for MediaTek Wi-Fi chipsets, where a packet counter could drift upward on multi-link peers and eventually block a station from transmitting. The advisory does not state a severity rating, and the patch is presented as a resolved kernel fix. The advisory does not give an explicit recommendation beyond the referenced commit.

Technical summary

The flaw is a counter accounting error in the mt76 Wi-Fi driver: the increment of wcid->non_aql_packets and its decrement on completion could land on different link wcids for MLO peers, so the count grows until the station is blocked, which the advisory frames as a denial-of-service style condition. The fix keeps the counter on the primary link's wcid via a new helper, mt76_wcid_primary(), in mt76.h and tx.c. The advisory cites the fixed commit 752770d7a58c821c17909c3ca67f9f14ab146a40 and the Fixes tag 86c051f2c418, but it does not state affected or fixed kernel version ranges, a CVSS score, an attack vector or required privileges, exploitation status, or workarounds. Detection guidance is not stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/752770d7a58c821…9c3ca67f9f14ab146a40

Score

No CVSS score published.

Affects

LinuxMediaTek, Inc.LinuxLinux kernelMediaTek, Inc. mt76