EUVD-2026-86153

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

CVE-2026-93281 wifi: rtw89: fix HE extended capability length check

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

CVE-2026-93281

The Linux kernel contains a vulnerability in the rtw89 wifi driver. Specifically, the function rtw89_mac_check_he_obss_narrow_bw_ru_iter() incorrectly validates the length of extended capabilities, allowing a read of byte 10 even when the datalen is less than 11. The issue is resolved by requirin...

PT-2026-98119

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the parser fails to verify the length of the PHY status Information Element IE before processing. Because hardware may report a PHY status ...

Linux Distros Unpatched Vulnerability : CVE-2026-97500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range...

CVE-2026-97500: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...

PT-2026-104885

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...

CVE-2026-93281

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

CVE-2026-93281: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

Linux Distros Unpatched Vulnerability : CVE-2026-93281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below...

PT-2026-97968

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the function rtw89 mac check he obss narrow bw ru iter incorrectly validates the length of extended capability data. The function attempts ...

CVE-2026-97500

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead...

SUSE CVE-2026-93166

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: debug: fix off by on in rtw89ppdustr This comparison should be = to avoid an out of bounds access...

Linux Distros Unpatched Vulnerability : CVE-2026-93166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: debug: fix off by on in rtw89ppdustr This comparison should be = to avoid an ou...

CVE-2026-93166: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: debug: fix off by on in rtw89ppdustr This comparison should be = to avoid an out of bounds access...

PT-2026-94962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the rtw89 ppdu str function within the wifi rtw89 module. The problem is caused by an incorrect comparison operator where a should be = to properl...

ROS-20260915-73-0204

The vulnerability of the rtw89 component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid adding an interface to the list twice when SER occurs. If SER L2 occurs during the WoWLAN resume flow, the interface addition process is triggered by ieee80211reconfig. However, due to the return failure of...

SUSE CVE-2026-80939

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an asynchronous SError during warm reboot: SError Interrupt on CPU8, code...

Linux Distros Unpatched Vulnerability : CVE-2026-80939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an...