All vulnerabilities
CVE-2026-93789

Linux: wifi: iwlwifi: bound aligned TLV advance in FW parser

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in61da42fdd21d98ccb8f1ec5224659f3d09202cf4Also 8c332d45b736d41301b7e07f322785d821265dbc, 4cfadb2e01566bc36d42922fbe18838345087050 and 2 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 61da42fdd21d98ccb8f1ec5224659f3d09202cf4LinuxCVE List
  • 8c332d45b736d41301b7e07f322785d821265dbcLinuxCVE List
  • 4cfadb2e01566bc36d42922fbe18838345087050LinuxCVE List
  • 528fa9eb14c209533ca26958b76da55e0ce239d8LinuxCVE List
  • 7aa9097623afb694bc25382a62e14d8e82bf002fLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: bound aligned TLV advance in FW parser

Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image.

This avoids length underflow on malformed TLVs.

Text from CVE List

Affected versions 16

  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before 61da42fdd21d98ccb8f1ec5224659f3d09202cf4CVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before 8c332d45b736d41301b7e07f322785d821265dbcCVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before ce709fcab5e1d4df6d4ba980736dc5908502a40fCVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before 4cfadb2e01566bc36d42922fbe18838345087050CVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before 528fa9eb14c209533ca26958b76da55e0ce239d8CVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before 7aa9097623afb694bc25382a62e14d8e82bf002fCVE List
  • Linuxaffected: dd7a2509b3a79b290730a9c6a784bf03fedabb9a before acad742714bdc70e7fd7f234323807c596828213CVE List
  • Linuxaffected: 2.6.35CVE List
  • Linuxunaffected: all versions before 2.6.35CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7