31 matches found
AZL-106134 CVE-2026-98186 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
DEBIAN-CVE-2026-98186
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98186
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
UBUNTU-CVE-2026-98186
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98186
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98186: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
PT-2026-115722
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex search oui in ie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs,...
EUVD-2024-19176
Malicious code in bioql PyPI...
CVE-2024-21467
Information disclosure while handling beacon probe frame during scan entry generation in client side...
CVE-2024-33070 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33070 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33070: Buffer Over-read
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33048: Buffer Over-read
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...
CVE-2024-33050: Buffer Over-read
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...
CVE-2024-21467
Information disclosure while handling beacon probe frame during scan entry generation in client side...
CVE-2024-21467
CVE-2024-21467 is a WLAN information-disclosure issue arising from how beacon probe frames are processed during scan entry generation on the client side. Affected component: Qualcomm WLAN/host stack; root cause: out-of-bounds beacon probe frame handling leading to information disclosure with pote...
CVE-2024-21467 Buffer Over-read in WLAN Host Communication
Information disclosure while handling beacon probe frame during scan entry generation in client side...