Skip to main content
CVE-2026-98565VulnerabilityPublished Updated

Microsoft · net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98565· Medium

Not known to be exploited · fixed in e9a5298532780ecdd05c3220f3e1e3067b3537c3 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in e9a5298532780ecdd05c3220f3e1e3067b3537c3, c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4, bd172580e624bac00d83abd5c4320d2e14d853bc +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ ddda1ac116c852bb969541ed53cffef7255c4961, < e9a5298532780ecdd05c3220f3e1e3067b3537c3
Fixed in
  • e9a5298532780ecdd05c3220f3e1e3067b3537c3
LinuxLinuxAffected
  • ≥ ddda1ac116c852bb969541ed53cffef7255c4961, < c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4
Fixed in
  • c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4
LinuxLinuxAffected
  • ≥ ddda1ac116c852bb969541ed53cffef7255c4961, < bd172580e624bac00d83abd5c4320d2e14d853bc
Fixed in
  • bd172580e624bac00d83abd5c4320d2e14d853bc
LinuxLinuxAffected
  • ≥ ddda1ac116c852bb969541ed53cffef7255c4961, < aae2a1f1e3a0ac5eeb439262a2328a2a392413ac
Fixed in
  • aae2a1f1e3a0ac5eeb439262a2328a2a392413ac
LinuxLinuxAffected
  • ≥ ddda1ac116c852bb969541ed53cffef7255c4961, < 62c0e38b2e5034184d4502ce77bd178b29e59b83
Fixed in
  • 62c0e38b2e5034184d4502ce77bd178b29e59b83
LinuxLinuxAffected
  • =5.1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

This vulnerability involves a NULL pointer dereference occurring during the unbind operation of MT7531 and MT7621 components in Microsoft software versions 3.0 and 4.0. The issue can cause a system crash or instability when the affected components are unbound.

References

Community reviews

Loading reviews…