wifi: rtw89: fix HE extended capability length check (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % · percentile 9 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen >= 11 before reading data[10].
References
- https://git.kernel.org/stable/c/eddf53f1edb0cf7f302bd15cdb47cca90948c205
- https://git.kernel.org/stable/c/655c4401c18d735dbaf2cc172ff4f626b3a896a0
- https://git.kernel.org/stable/c/bddbd1de765bf6ddc0473ad683910eb3a2a92a43
- https://git.kernel.org/stable/c/f2a01deff7d0d5cc3dcbf2358dac113979303c8e
- https://git.kernel.org/stable/c/f132fc01b359a0f7d81fe13d769ea4e7c4baa66e
- https://git.kernel.org/stable/c/2aba608a86e9b099c9af2ea70b620552dee2b628
European references
- ENISA EUVD · EUVD-2026-86153
- GCVE · GCVE-0-2026-93281
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 8d540f9d29162e273797bef36686a010724f0f8a < eddf53f1edb0cf7f302bd15cdb47cca90948c205 ; affected 8d540f9d29162e273797bef36686a010724f0f8a < 655c4401c18d735dbaf2cc172ff4f626b3a896a0 ; affected 8d540f9d29162e273797bef36686a010724f0f8a < bddbd1de765bf6ddc0473ad683910eb3a2a92a43 ; affected 8d540f9d29162e273797bef36686a010724f0f8a < f2a01deff7d0d5cc3dcbf2358dac113979303c8e ; affected 8d540f9d29162e273797bef36686a010724f0f8a < f132fc01b359a0f7d81fe13d769ea4e7c4baa66e ; affected 8d540f9d29162e273797bef36686a010724f0f8a < 2aba608a86e9b099c9af2ea70b620552dee2b628 |
| Linux · Linux | affected 6.1 ; unaffected 0 < 6.1 ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* ; unaffected 6.12.110 ≤ 6.12.* ; unaffected 6.18.52 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |