All vulnerabilities
CVE-2026-97500

Linux: wifi: rtw89: phy: check length before parsing PHY status IE

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.16%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in72bf6944e336d6f046f5c886ebededdd6560a693Also 213f9e0ab2b4f35fe8d342333238c6cc91513fbf, 98e5720afd7495eece580238f232e3b3b4c022da and 1 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 72bf6944e336d6f046f5c886ebededdd6560a693LinuxCVE List
  • 213f9e0ab2b4f35fe8d342333238c6cc91513fbfLinuxCVE List
  • 98e5720afd7495eece580238f232e3b3b4c022daLinuxCVE List
  • 884495c39de1a02f42bd40051b921e2311d6ac91LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: phy: check length before parsing PHY status IE

Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Text from CVE List

Affected versions 10

  • Linuxaffected: e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 72bf6944e336d6f046f5c886ebededdd6560a693CVE List
  • Linuxaffected: e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 213f9e0ab2b4f35fe8d342333238c6cc91513fbfCVE List
  • Linuxaffected: e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 98e5720afd7495eece580238f232e3b3b4c022daCVE List
  • Linuxaffected: e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 884495c39de1a02f42bd40051b921e2311d6ac91CVE List
  • Linuxaffected: 5.16CVE List
  • Linuxunaffected: all versions before 5.16CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4