The Linux kernel wifi driver mt76/mt7996 parses the default EEPROM firmware without verifying its size. If the firmware file is truncated, the driver copies the firmware into a buffer and then later reads beyond the buffer during variant validation or fallback copying. This out‑of‑bounds read (CWE‑125) can trigger a kernel fault, leading to a crash and loss of availability. No direct code execution or information disclosure is explicitly stated, but the fault may reveal kernel internals depending on crash context.

The vulnerability affects the Linux kernel, specifically the wifi drivers for MediaTek MT76 and MT7996 devices. No version range is specified in the CNA data; therefore any system running a kernel that includes the mt76/mt7996 driver may be impacted.

The CVSS score of 5.7 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or requires the ability to supply or modify the EEPROM firmware used by the driver, which typically occurs during device boot or firmware update. An attacker who can influence the firmware source could trigger the out‑of‑bounds read, causing a kernel‑level denial of service. Due to the absence of a publicly available exploit and moderate CVSS, the risk is considered moderate but should be mitigated promptly to prevent potential disruptions.