CVE-2026-92498

A flaw was found in the Linux kernel's ath6kl Wi-Fi driver. Insufficient length checks in several Wireless Management Interface WMI event handlers, specifically ath6klwmiscancompleterx, ath6klwmiaddbareqeventrx, and ath6klwmidelbareqeventrx, allow the system to read beyond the allocated buffer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware provides bad input, it has nothing to do with the driver’s stack at this point; thus, the WARNON call adds no value. Additionally, this is one of the top syzbot...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath6kl – Fix for out-of-bounds reads during IE parsing when accessing the fields beaconielen, assocreqlen, and assocresplen in the ath6klwmiconnecteventrx function. The fields beaconielen, assocreqlen, and assocresplen that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: The lengths of association requests and responses are clamped before subtracting the fixed IE offsets. The function ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen =-4 and assocresplen =-6, bo...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath6kl – Fix for OOB read from the firmware’ nummsg field in the TX complete handler The firmware-controlled nummsg field u8, 0-255 affects the loop in ath6klwmitxcompleteeventrx, without any validation against the buffer...

SUSE CVE-2026-92498

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

Linux Distros Unpatched Vulnerability : CVE-2026-92498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that th...

CVE-2026-92498

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

AZL-102903 CVE-2026-92498 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

DEBIAN-CVE-2026-92498

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

CVE-2026-92498

This vulnerability affects the Linux kernel 's ath6kl (Atheros 6K) wireless driver. Three WMI event handlers—ath6kl_wmi_scan_complete_rx() , ath6kl_wmi_addba_req_event_rx() , and ath6kl_wmi_delba_req_event_rx() —read from the event buffer without first verifying that the message is large enough t...

CVE-2026-92498 wifi: ath6kl: avoid buffer overreads in WMI event handlers

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

EUVD-2026-82119

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

CVE-2026-92498 wifi: ath6kl: avoid buffer overreads in WMI event handlers

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

CVE-2026-92498: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

PT-2026-94806

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Buffer overreads occur in the ath6kl wifi driver within WMI event handlers. The system reads from the event buffer without verifying if the message size is sufficient to hold the expecte...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: The severity of the WARN message has been reduced to be sent via devdbg in the callback. The WARN message is triggered due to a known race condition, which is documented in the code above. This issue is now properly...

SUSE CVE-2026-89524

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen -= 4 and assocresplen -= 6, both u8, with no lower bound. The aggregate check...

Linux Distros Unpatched Vulnerability : CVE-2026-89524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6klcfg80211connectevent subtracts fixed IE offsets from assocreqlen -= 4 and...

CVE-2026-89524

A flaw was found in the ath6kl Wi-Fi driver of the Linux kernel. An integer underflow vulnerability occurs when processing Wi-Fi association requests or responses that are shorter than expected. This can cause the system to read beyond the intended buffer, leading to the disclosure of adjacent...