CVE-2026-43176

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 "wifi: rtw89: pci: validate sequence number of TX release report" does validation on existing chips, which somehow a release...

CVE-2026-43176

The CVE-2026-43176 entry refers to a vulnerability in the Linux kernel’s rtw89 WiFi driver (PCI path) affecting RTL8922DE where release report content was not properly validated. This could cause a crash (DoS) when handling a malformed TX release report. The root cause is insufficient validation ...

CVE-2026-43176 wifi: rtw89: pci: validate release report content before using for RTL8922DE

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 "wifi: rtw89: pci: validate sequence number of TX release report" does validation on existing chips, which somehow a release...

Linux Distros Unpatched Vulnerability : CVE-2026-43213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports abnormal sequence number in TX release report, which will access...

Linux Distros Unpatched Vulnerability : CVE-2026-43267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bssconf-beaconint might be zero, which could resu...

PT-2026-37607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero error can occur in the rtw89 WiFi driver during beacon tracking. This happens when the bss conf-beacon int variable is zero, which can lead to a kernel crash. The issu...

CVE-2026-43213: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports abnormal sequence number in TX release report, which will access out-of-bounds of wdring-pages array, causing NULL pointer dereference. BUG:...

CVE-2026-43267: Divide By Zero

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bssconf-beaconint might be zero, which could result in a division by zero error in subsequent calculations. Set a...

PT-2026-37553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 PCI Wi-Fi driver where the kernel fails to validate the sequence number of the TX release report. If the hardware reports an abnormal sequence number, it lea...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the possibility that beaconint may be zero in the rtw89 driver, potentially leading to a zero division...

CVE-2026-43176: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 "wifi: rtw89: pci: validate sequence number of TX release report" does validation on existing chips, which somehow a release...

rtw89 Append ProbeReq_ie DoS

The vulnerability of the rtw89.Append ProbeReqie function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a service...

PT-2026-72847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 Wi-Fi driver where an incorrect data type for the scan index can lead to an infinite loop during Wi-Fi scanning on the 6GHz band. This causes a kernel soft...

rtw89_scan_get_6g_disabled_chan Heap Buffer Overflow DoS

The vulnerability of the rtw89scanget6gdisabledchan function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter support driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Realtek wireless driver Heap Buffer Overflow DoS

The vulnerability of the rtw89camresetkeyiter function in the drivers/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for Linux operating systems is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker t...

Realtek kernel Wireless DoS

The vulnerability of the rtw89coremlsrswitch function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a system failure...

rtw89 Linux Kernel Data Compromise

The vulnerability of the rtw89 component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Realtek wireless driver Heap Buffer Overflow DoS

The vulnerability of the functions rtw89coreregisterhw and rtw89pciprobe in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can...

Realtek wireless driver Heap Buffer Overflow DoS

The vulnerability of the rtw89h2ctx function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an...

Azure Linux 3.0 Security Update: kernel (CVE-2024-48873)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48873 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: check return value of...