CVE-2026-74340

The CVE concerns the Linux kernel wifi driver wcn36xx (PRINT_REG_INFO path) where the firmware-controlled rsp->count is used as the loop bound to index into the flexible rsp->regs[] array without validating against the message length. If count exceeds the actual data, this leads to out-of-b...