CVE-2026-23325: linux Out-of-bounds Read
CVSS: 7.1v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-23325DEBIAN-CVE-2026-23325
Published 25-03-2026Last modified 11-05-2026
Vulnerability summary
CVE-2026-23325 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 1.9% of scored vulnerabilities.
CVSS score
7.1/10
010
High · v3.1 (NVD)EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 18 · Related 16Timeline
- 25-03-2026PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt7996_mac_write_txwi_80211 in order to avoid a possible oob access.
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.1Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.13%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.13% on 19-09-2026
19-09-202619-10-2026
EPSS score0.13%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu130 products
- linux< 6.8.0-136.136 | All versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1061.64 | All versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < a6605f61913155e130bfd04d438c3ce1a572fb0f | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < ca1adc04fc2cb1d9f1842e429debe6a520d54966 | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < f4cdf6b43689e901a341e7147fcfb25057c38eae | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < 45661d22639c4b747ef1bd0822b8e76e421a808a | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < 60862846308627e9e15546bb647a00de44deb27b | 6.2
- linux_kernelEOL≥ 6.2.1, < 6.6.130 | ≥ 6.7, < 6.12.77 | ≥ 6.13, < 6.18.17 | ≥ 6.19, < 6.19.7 | 6.2 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6 | 7.0:rc7
Debian1 product
- linux< 6.12.85-1 | < 6.19.8-1
3 vendors · 133 products
