The mt76 Wi‑Fi driver for the mt7921 chipset fails to validate the bounds of CLC firmware records supplied by the vendor. A crafted firmware image can place the region table pointer before the firmware buffer, cause the parsing loop to stall, or index past the end of the structure. This can result in kernel memory corruption, which in turn may enable privilege escalation or system crashes. The weakness maps to improper bounds checking on memory buffers.

All Linux kernel installations that include the mt76 driver for the mt7921 wireless device are affected. No specific kernel version range was provided, but any build containing the vulnerable driver code without the bounds‑check patch is potentially exposed. The vendor is the Linux kernel community, and products are generic Linux kernel distributions.

The CVSS score is 7.0, and the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploitation activity at this time. However, because the issue involves a trusted firmware loader trusting attacker‑controlled data, the potential for exploitation is high. An attacker with the ability to supply a malicious firmware image—either through physical device modification or through a compromised firmware repository—could trigger the fault. Given the CVSS score of 7.0 and the EPSS score of < 1%, the overall exploitability risk remains uncertain, but the kernel memory corruption nature warrants prompt mitigation.