The vulnerability arises from a buffer length underflow in the Linux kernel’s mt76 mt7921 wireless driver. This underflow can cause the driver to spin in an almost infinite loop or to apply an invalid power setting, resulting in a failure to initialize the wireless interface. The consequence of this behavior is a denial of service at the system or interface level, potentially preventing the device from establishing network connectivity.

This issue affects Linux systems running any kernel that includes the mt76 mt7921 driver prior to the fix. The specific kernel versions that contain the vulnerability are not listed in the available data, but the problem exists in all releases where the mt7921 driver is compiled with the CLC power table code without the applied patch.

The CVSS score is not provided, but the nature of the defect—a buffer underflow leading to an infinite loop—indicates a high severity that can disrupt device operation. The EPSS score is not available, so the historical likelihood of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. While the exact attack path is not described, the likely vector requires interaction with the wireless driver, which may be triggered by an attacker in proximity to the device or by configuration changes made to the power table. Given the potential for a device to hang or fail to boot its network stack, the risk to availability is significant.