---
id: CVE-2026-46136
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt7921: fix a potential clc buffer length underflow

  The buf_len is used to limit the iterations for retrieving the country
  power setting and may underflow …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt7921: fix a potential clc buffer length underflow

  The buf_len is used to limit the iterations for retrieving the country
  power setting and may underflow …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-787
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.1.75, < 6.1.175'
  - 'linux_kernel >= 6.6.14, < 6.6.140'
  - 'linux_kernel >= 6.7.2, < 6.12.88'
  - 'linux_kernel >= 6.13, < 6.18.30'
  - 'linux_kernel >= 6.19, < 7.0.7'
patched:
  - linux_kernel 7.0.7
published: '2026-05-28'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:19:46.013'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46136'
references:
  - url: 'https://git.kernel.org/stable/c/0aa63d33742b805d1a218d18d12b983cce4b2f7b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2a79b1a492bcfa725383b6580cd93a6862308c85'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5373f8b19e568b5c217832b9bbef165bd2b2df14'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/90cc573fd2f46ddbc2c329e7814b5ba3deb7b939'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a0111847f0b4f6023f6dd320114697514e024ba3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e451c325b000b9a0081fd93bc6d103d6943d4b55'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-784472.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00176
epssPercentile: 0.0662
ingestedAt: '2026-10-15T03:30:12.890Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix a potential clc buffer length underflow

The buf_len is used to limit the iterations for retrieving the country
power setting and may underflow under certain conditions due to changes
in the power table in CLC.

This underflow leads to an almost infinite loop or an invalid power
setting resulting in driver initialization failure.

## Affected

- `linux_kernel >= 6.1.75, < 6.1.175`
- `linux_kernel >= 6.6.14, < 6.6.140`
- `linux_kernel >= 6.7.2, < 6.12.88`
- `linux_kernel >= 6.13, < 6.18.30`
- `linux_kernel >= 6.19, < 7.0.7`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.7`