{"schema":"threatline.record/2","record":{"id":"CVE-2026-93797","aliases":[],"summary":"wifi: iwlwifi: mvm: fix an off-by-1 boundary check","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: fix an off-by-1 boundary check\n\nBefore looking at the 11th byte, check the length is big enough.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"2c8c06c59ed72a42e4d32e222542b582b4911459","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"23d3fddddd2bcedb4fd6cec5bef16b1fbb563019","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"45fcdbae679861b90f08964a0c3e9eead3bacd6f","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"7a2d4efea2c41b49db90907c8b6f37f8b63a9f50","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"1e3b72c9b63288a5f204e2c8f38eae01515d7dc5","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"4d60332387336088e66cc8f1e71e516b6b872ef9","status":"affected","versionType":"git"},{"version":"4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4","lessThan":"d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"5.4","status":"affected"},{"version":"0","lessThan":"5.4","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"2c8c06c59ed72a42e4d32e222542b582b4911459","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"23d3fddddd2bcedb4fd6cec5bef16b1fbb563019","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"45fcdbae679861b90f08964a0c3e9eead3bacd6f","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"7a2d4efea2c41b49db90907c8b6f37f8b63a9f50","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"1e3b72c9b63288a5f204e2c8f38eae01515d7dc5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","source_modified_at":"2026-10-03T10:57:31.431Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"4d60332387336088e66cc8f1e71e516b6b872ef9","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00173,"percentile":0.06355,"score_date":"2026-10-23"},"published_at":"2026-09-24T16:02:30.333Z","modified_at":"2026-10-03T10:57:31.431Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93797","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-03T10:57:31.431Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93797","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-03T10:57:31.431Z","content_hash":"6d1677a0c6a9d4b58a26c8123163c2e7bcf3cf247d4dc1a1750ca05ff15ade37"}}