{"id":14903,"date":"2026-09-04T19:02:17","date_gmt":"2026-09-04T11:02:17","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-63832"},"modified":"2026-09-04T19:02:17","modified_gmt":"2026-09-04T11:02:17","slug":"cve-2026-63832","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-63832","title":{"rendered":"CVE-2026-63832 [HIGH] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: add wcid"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mt76: add wcid publish check in mt76_sta_add<\/p>\n<p>Since mt7925_mac_sta_add publishes wcid, add publish check in mt76_sta_add<br \/>\nto avoid reinitializing the wcid-&gt;poll_list.<\/p>\n<p>Found dev-&gt;sta_poll_list corruption when using mt7925 and 7.1-rc4.<br \/>\nAccording to the corruption information, prev-&gt;next was changed to itself.<\/p>\n<p>wlan0: disconnect from AP 90:fb:5d:94:8b:e3 for new auth to 90:fb:5d:94:8b:e2<br \/>\nwlan0: authenticate with 90:fb:5d:94:8b:e2 (local address=84:9e:56:9c:7e:6b)<br \/>\nwlan0: send auth to 90:fb:5d:94:8b:e2 (try 1\/3)<br \/>\n slab kmalloc-8k start ffff8c80958a6000 pointer offset 4160 size 8192<br \/>\nlist_add corruption. prev-&gt;next should be next (ffff8c808a7488f8), but was ffff8c80958a7040. (prev=ffff8c80958a7040).<\/p>\n<p> mt76_wcid_add_poll+0x95\/0xd0 [mt76]<br \/>\n mt7925_mac_add_txs.part.0+0xa5\/0xe0 [mt7925_common]<br \/>\n mt7925_rx_check+0xa7\/0xc0 [mt7925_common]<br \/>\n mt76_dma_rx_poll+0x50d\/0x790 [mt76]<br \/>\n mt792x_poll_rx+0x52\/0xe0 [mt792x_lib]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mt76: add wcid publish check in mt76_sta_add<\/p>\n<p>Since mt7925_mac_sta_add publishes wcid, add publish check in mt76_sta_add<br \/>\nto a<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-14903","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/14903","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14903"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14903"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14903"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}