A high-severity memory corruption vulnerability in the Linux kernel mt7915 driver allows an attacker with adjacent network access to potentially trigger a system crash or execute arbitrary code.

The vulnerability resides in the mt7915_mcu_get_eeprom function, which fails to validate the EEPROM address reported by the device against the destination buffer size. An unauthenticated attacker with the ability to influence the device response can trigger a 16-byte out-of-bounds write, leading to memory corruption.

Successful exploitation of this flaw can lead to a kernel panic, causing denial of service for the affected system, or potential privilege escalation. Given the CVSS score of 8.8, this represents a significant risk to system stability and integrity, particularly for infrastructure relying on the mt7915 wireless chipset.

Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or later versions where the boundary check for the EEPROM address has been implemented.

Proactive Monitoring: Monitor system logs for kernel oops messages or unexplained crashes related to the mt7915 driver, which may indicate attempted exploitation or hardware malfunction.

Compensating Controls: Ensure that untrusted wireless hardware is isolated from critical network segments, as the attack vector requires adjacent network access.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

This vulnerability presents a high risk to systems utilizing affected MediaTek wireless hardware. Administrators should prioritize patching the kernel to the recommended versions to prevent potential memory corruption and system instability. Given the nature of kernel-level flaws, applying these security updates as part of the standard maintenance cycle is critical for maintaining robust system security.