CVE-2026-98190 wifi: wilc1000: fix out-of-bounds read in P2P public action frames

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

EUVD-2026-93118

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

CVE-2026-98190

The Linux kernel (specifically the wilc1000 driver) contains an out-of-bounds read vulnerability in the processing of P2P public action frames . The issue arises because ieee80211_is_public_action() only verifies a minimum length of 25 bytes, while the subsequent parsing in wilc_wfi_p2p_rx() and ...

CVE-2026-98190 wifi: wilc1000: fix out-of-bounds read in P2P public action frames

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

CVE-2026-98190

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

Linux Distros Unpatched Vulnerability : CVE-2026-98190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That...

CVE-2026-98190: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

PT-2026-106519

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An out-of-bounds read exists in the wilc1000 wifi driver during the parsing of P2P public action frames. The functions wilc wfi p2p rx and mgmt tx rely on ieee80211 is public action, which...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel versions 5.8 through 5.19.x, prior to 5.19.16, local attackers who were able to inject WLAN frames into the mac80211 stack could carry out a NULL pointer dereferencing denial-of-service attack against the beacon protection of P2P devices...

CVE-2026-104436

Zebra versions before 4.5.0 are susceptible to an uncontrolled resource consumption vulnerability. Remote P2P peers can exhaust blocking-pool threads by transmitting oversized block locator vectors, specifically by sending getblocks or getheaders messages containing up to 65,535 locator hashes . ...

EUVD-2026-91446

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

CVE-2026-104429 Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

EUVD-2026-91440

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

CVE-2026-104429 Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

CVE-2026-104429 Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

CVE-2026-104429

The Zebra (zebrad) software, versions 5.0.0 before 6.0.0-rc.0 , is vulnerable to a mempool admission bypass. The root cause is that the system fails to apply per-peer mempool admission caps to transactions received as direct P2P tx messages , as these are queued without recording the sending peer...

PT-2026-104240

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

CVE-2026-104429: Allocation of Resources Without Limits or Throttling

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...

PT-2026-104246

Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vectors. Attackers can send getblocks or getheaders messages with up to 65,535 locator hashes, triggering per-hash chain...

PT-2026-105832

Summary LMDeploy's PyTorch DistServe/PD-disaggregation control plane used recv pyobj to deserialize messages received through a ZeroMQ PULL socket. PyZMQ implements recv pyobj using Python pickle deserialization, which can execute arbitrary code while reconstructing an object. The peer address us...