EUVD-2026-93114

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

CVE-2026-98186

The Linux kernel contains an out-of-bounds read vulnerability in the mwifiex driver. The function mwifiex_search_oui_in_ie() processes a pairwise-cipher (PTK) count from an attacker-supplied RSN or WPA information element (IE) within a beacon/probe-response. Because the count is not validated aga...

PT-2026-106515

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex search oui in ie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs,...