CVE-2026-80937Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy mt7915_mcu_get_eeprom() copies a fixed EFUSE block into the driver's dev->mt76.eeprom.data buffer at the offset reported by the MCU response (res->addr, a device-controlled __le32) without checking it against the buffer size. A malicious or malfunctioning device can report an arbitrary address and drive a 16-byte out-of-bounds write past eeprom.data. Reject a response whose address would place the copy outside eeprom.data before deriving the destination pointer. Devices that echo the requested in-bounds offset are unaffected.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-09-11); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters38d
Disclosure
CVE-2026-80937: OOB write in Linux kernel mt76 mt7915 EFUSE copy, device-controlled address, 16-byte overflow. CVSS N/A, unpatched. Patch now if you use mt7915 wifi. https://www.valtersit.com/cve/CVE-2026-80937 #CVE #LinuxKernel #infosec #cybersecurity #infosec #Microsoft #CVE #infosec #XSS #valtersit #snippet #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #docker
Post summary
The post discloses CVE-2026-80937, detailing an out-of-bounds write vulnerability in the Linux kernel mt7915 Wi-Fi driver, notes it is currently unpatched, and urges affected users to apply patches when available.
1000065
1.1K followersView on X
VulDB 🛡@vuldb46d
Disclosure
A severe vulnerability was disclosed for Linux Kernel (CVE-2026-80937) https://vuldb.com/vuln/402638
Post summary
A severe vulnerability (CVE‑2026‑80937) has been disclosed for the Linux Kernel, but no further details or mitigations are provided.
00000117
2.3K followersView on X

Explore more

Back to dashboard