All vulnerabilities
CVE-2026-93797

Linux: wifi: iwlwifi: mvm: fix an off-by-1 boundary check

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2c8c06c59ed72a42e4d32e222542b582b4911459Also 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019, 45fcdbae679861b90f08964a0c3e9eead3bacd6f and 3 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 2c8c06c59ed72a42e4d32e222542b582b4911459LinuxCVE List
  • 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019LinuxCVE List
  • 45fcdbae679861b90f08964a0c3e9eead3bacd6fLinuxCVE List
  • 7a2d4efea2c41b49db90907c8b6f37f8b63a9f50LinuxCVE List
  • 1e3b72c9b63288a5f204e2c8f38eae01515d7dc5LinuxCVE List
  • 4d60332387336088e66cc8f1e71e516b6b872ef9LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix an off-by-1 boundary check

Before looking at the 11th byte, check the length is big enough.

Text from CVE List

Affected versions 16

  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 2c8c06c59ed72a42e4d32e222542b582b4911459CVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019CVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 45fcdbae679861b90f08964a0c3e9eead3bacd6fCVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 7a2d4efea2c41b49db90907c8b6f37f8b63a9f50CVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 1e3b72c9b63288a5f204e2c8f38eae01515d7dc5CVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 4d60332387336088e66cc8f1e71e516b6b872ef9CVE List
  • Linuxaffected: 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8CVE List
  • Linuxaffected: 5.4CVE List
  • Linuxunaffected: all versions before 5.4CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7