Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-97500

wifi: rtw89: phy: check length before parsing PHY status IE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to < 72bf6944e336d6f046f5c886ebededdd6560a693affected
  • e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to < 213f9e0ab2b4f35fe8d342333238c6cc91513fbfaffected
  • e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to < 98e5720afd7495eece580238f232e3b3b4c022daaffected
  • e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to < 884495c39de1a02f42bd40051b921e2311d6ac91affected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References