UBUNTU-CVE-2026-93799

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799

The Linux kernel contains a vulnerability in the iwlwifi wireless driver. The function BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from a firmware notification and uses it to index the fw_id_to_mac_id[] array without performing bounds checking . This lack of validation can lead to ou...

EUVD-2026-86186

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799 wifi: iwlwifi: mvm: validate sta_id in BA window status notif

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799 wifi: iwlwifi: mvm: validate sta_id in BA window status notif

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

CVE-2026-93799

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to index fwidtomacid without bounds checking. Validate staid before array...

ROS-20260924-73-0090

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c driver, which is part of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability coul...

PT-2026-104869

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate sta id in BA window status notif BA WINDOW STATUS NOTIFICATION ID extracts a 5-bit sta id from the firmware notification and uses it to index fw id to mac id without bounds checking. Validate sta id...

PT-2026-97999

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the mvm module. The BA WINDOW STATUS NOTIFICATION ID extracts a 5-bit sta id from a firmware notification and uses it to index the fw id to m...

Linux Distros Unpatched Vulnerability : CVE-2026-93799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to...

golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...

golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...

PT-2026-97539

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.20 Description An issue exists in the Elasticsearch indexer component where the serializedDataForUpdateAccounts function in indexer/common.go fails to escape the acc.Name variable when constructing bulk JSON and...

SUSE CVE-2026-73550

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...

golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...

ROS-20260922-73-0126

The vulnerability in golang-x-crypto is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

EUVD-2026-84111

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...

CVE-2026-73550 Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes a...

CVE-2026-73550

Envoy (open-source edge/service proxy) is vulnerable to an HTTP/2 memory-exhaustion flaw. When a duplicate Host header is present alongside :authority , Envoy copies the decoded value before discarding it, but the discarded copy bypasses saveHeader and is not charged against request-header size o...