CVE-2026-93797

CVE-2026-93797: vulnerability in Linux

wifi: iwlwifi: mvm: fix an off-by-1 boundary check

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 94% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough.
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5https://git.kernel.org/stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019https://git.kernel.org/stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459https://git.kernel.org/stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6fhttps://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9https://git.kernel.org/stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8