CVE-2026-93281

🗓️ 24 Sep 2026 15:52:23Reported by LinuxType

Out-of-bounds read in Linux kernel rtw89 driver's HE extended capability length check.

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2026-93281 wifi: rtw89: fix HE extended capability length check	24 Sep 202615:52	–	cvelist
EUVD	EUVD-2026-86153	24 Sep 202615:52	–	euvd
NVD	CVE-2026-93281	24 Sep 202616:17	–	nvd

Vulners

CNA

Node

linux linux_kernelRange6.1–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.110

linux linux_kernelRange6.13.0–6.18.52

linux linux_kernelRange6.19.0–7.2.6

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/realtek/rtw89/mac.c"
    ],
    "versions": [
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "eddf53f1edb0cf7f302bd15cdb47cca90948c205",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "655c4401c18d735dbaf2cc172ff4f626b3a896a0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "bddbd1de765bf6ddc0473ad683910eb3a2a92a43",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "f2a01deff7d0d5cc3dcbf2358dac113979303c8e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "f132fc01b359a0f7d81fe13d769ea4e7c4baa66e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8d540f9d29162e273797bef36686a010724f0f8a",
        "lessThan": "2aba608a86e9b099c9af2ea70b620552dee2b628",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/realtek/rtw89/mac.c"
    ],
    "versions": [
      {
        "version": "6.1",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.1",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.52",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.6",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/eddf53f1edb0cf7f302bd15cdb47cca90948c205
git	www.git.kernel.org/stable/c/f132fc01b359a0f7d81fe13d769ea4e7c4baa66e
git	www.git.kernel.org/stable/c/655c4401c18d735dbaf2cc172ff4f626b3a896a0
git	www.git.kernel.org/stable/c/2aba608a86e9b099c9af2ea70b620552dee2b628
git	www.git.kernel.org/stable/c/f2a01deff7d0d5cc3dcbf2358dac113979303c8e
git	www.git.kernel.org/stable/c/bddbd1de765bf6ddc0473ad683910eb3a2a92a43

24 Sep 2026 16:17Current

5.8Medium risk

Vulners AI Score5.8