Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-93063

wifi: iwlwifi: mei: check SAP message length before reading it

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a29e442ee110aafdf7785fac6de44b22d3da43db to < a4034f1cc8a422cefc519290d8e6cfb7ff773586affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to < b90ebae632318dc2e5cd4ac96e454ec50f705579affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to < 9c6bea89a16815688a5240dd4a74c922a92fcdc3affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to < 242125bbf19a2974d22f3d5025c9c14c0a4aea58affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to < f7f770d12e6e928006f89a59291074e5fea82886affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to < 7d8cc301bcba233f31b589a45f4c1c97f2bb90d6affected
  • 9f71cebcac2148e68d0d67f113d0f9aabfcc7a2aaffected
  • 6.1.2 to < 6.1.188affected
  • 6.0.16 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References