{"schema":"threatline.record/2","record":{"id":"CVE-2026-93281","aliases":[],"summary":"wifi: rtw89: fix HE extended capability length check","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: fix HE extended capability length check\n\nrtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extended capability\nbyte 10, but rejects only datalen values below 10.  Byte 10 requires at\nleast 11 bytes.\n\nRequire datalen >= 11 before reading data[10].","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93281","source_modified_at":"2026-10-19T09:08:35.587Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"eddf53f1edb0cf7f302bd15cdb47cca90948c205","status":"affected","versionType":"git"},{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"655c4401c18d735dbaf2cc172ff4f626b3a896a0","status":"affected","versionType":"git"},{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"bddbd1de765bf6ddc0473ad683910eb3a2a92a43","status":"affected","versionType":"git"},{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"f2a01deff7d0d5cc3dcbf2358dac113979303c8e","status":"affected","versionType":"git"},{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"f132fc01b359a0f7d81fe13d769ea4e7c4baa66e","status":"affected","versionType":"git"},{"version":"8d540f9d29162e273797bef36686a010724f0f8a","lessThan":"2aba608a86e9b099c9af2ea70b620552dee2b628","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93281","source_modified_at":"2026-10-19T09:08:35.587Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.1","status":"affected"},{"version":"0","lessThan":"6.1","status":"unaffected","versionType":"semver"},{"version":"6.1.188","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.157","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.110","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.52","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.6","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93281","source_modified_at":"2026-10-19T09:08:35.587Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"655c4401c18d735dbaf2cc172ff4f626b3a896a0","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93281","source_modified_at":"2026-10-19T09:08:35.587Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"2aba608a86e9b099c9af2ea70b620552dee2b628","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00192,"percentile":0.08363,"score_date":"2026-10-23"},"published_at":"2026-09-24T15:52:23.240Z","modified_at":"2026-10-19T09:08:35.587Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93281","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:08:35.587Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93281","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/eddf53f1edb0cf7f302bd15cdb47cca90948c205"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/655c4401c18d735dbaf2cc172ff4f626b3a896a0"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/bddbd1de765bf6ddc0473ad683910eb3a2a92a43"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f2a01deff7d0d5cc3dcbf2358dac113979303c8e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f132fc01b359a0f7d81fe13d769ea4e7c4baa66e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/2aba608a86e9b099c9af2ea70b620552dee2b628"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:08:35.587Z","content_hash":"2910e61cae574d991f2023ce4f45478a79f0721705d132dc2e0da525929a8369"}}