Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-22978

wifi: avoid kernel-infoleak from struct iw_point

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ }; Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < d943b5f592767b107ba8c12a902f17431350378caffected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < a3827e310b5a73535646ef4a552d53b3c8bf74f6affected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < 442ceac0393185e9982323f6682a52a53e8462b1affected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8affected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < 024f71a57d563fbe162e528c8bf2d27e9cac7c7baffected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < e3c35177103ead4658b8a62f41e3080d45885464affected
  • 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to < 21cbf883d073abbfe09e3924466aa5e0449e7261affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.248 to ≤ 5.10.*unaffected
  • 5.15.198 to ≤ 5.15.*unaffected
  • 6.1.161 to ≤ 6.1.*unaffected
  • 6.6.121 to ≤ 6.6.*unaffected
  • 6.12.66 to ≤ 6.12.*unaffected
  • 6.18.6 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References