EUVD-2026-101055

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in setbitratemask when sdata not in driver ieee80211setbitratemask checks if the interface is running via ieee80211sdatarunning, but it does not check if the interface is still present in the driver. Wh...

CVE-2026-98406

The Linux kernel contains a vulnerability in the mac80211 WiFi stack where the ieee80211_set_bitrate_mask() function fails to verify if an interface is still present in the driver before calling drv_set_bitrate_mask(). This occurs because the function checks if the interface is running but ignore...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: Added an additional check for the number of channels returned by ioctlsock, SIOCSIWSCAN,..., to ensure that this number does not exceed IWMAXFREQUENCIES. Invalid requests will be rejected with the error...

ROS-20260930-73-0005

The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

DEBIAN-CVE-2026-97518

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy-ciphersuites do not describe any additional capability, but cfg80211 currently accepts them and leaves individual consumers to deal with them...

CVE-2026-97518 wifi: cfg80211: reject duplicate wiphy cipher suite entries

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy-ciphersuites do not describe any additional capability, but cfg80211 currently accepts them and leaves individual consumers to deal with them...

CVE-2026-97518 wifi: cfg80211: reject duplicate wiphy cipher suite entries

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy-ciphersuites do not describe any additional capability, but cfg80211 currently accepts them and leaves individual consumers to deal with them...

PT-2026-104887

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211 wext siwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211 wext siwgenie without any validation. The crash trace shows that a subsequent...

CVE-2026-97518: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in wiphy-ciphersuites do not describe any additional capability, but cfg80211 currently accepts them and leaves individual consumers to deal with them...

PT-2026-97984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a malformed Information Element IE buffer can be stored via the SIOCSIWGENIE command in the cfg80211 wext siwgenie function without proper validation. A subsequent...

The vulnerability in the wireless/wext-core.c component of the Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

SUSE CVE-2026-68412

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211wextsiwscan If the test against IEEE80211MAXSSIDLEN fails, then 'creq' leaks. Use the existing error handling path to fix it...

PT-2026-69812

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An error handling path in the cfg80211 wext siwscan function contains a flaw where the creq variable leaks if the test against IEEE80211 MAX SSID LEN fails. Recommendations At the moment...

CLSA-2026-1769610819 kernel: Fix of 39 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992195 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992530 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990195 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check...

EUVD-2017-2672

Malware in sbrugna...

EUVD-2023-59814

Malicious code in bioql PyPI...

SUSE CVE-2023-53153

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on reconnect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP...