CVE-2026-80933 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

Is your site exposed to CVE-2026-80933?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/03b81f015dbb29807ce1ec6d45537d658abdac69 https://git.kernel.org/stable/c/127a291f4c8069a4e71906938402cacfe24ee8cd https://git.kernel.org/stable/c/653c6e289b13cc6942f3e8f8e3c568e70fa42d1f https://git.kernel.org/stable/c/7074ec3769820302f1ccf8794a40a6582153b820 https://git.kernel.org/stable/c/b4bf67cc0871b13103c404b38e332b9d4403a0da

Frequently Asked Questions

What is CVE-2026-80933? +

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-80933? +

CVE-2026-80933 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-80933? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-80933