CVE-2026-72029 net: wwan: iosm: bound device offsets in the MUX downlink decoder

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken from the modem. firsttableindex, nexttableindex, tablelength,...

CVE-2026-72029

The CVE pertains to the Linux kernel net: wwan: iosm MUX downlink decoder. The vulnerability arises in mux_dl_adb_decode(), which uses device-supplied offsets (first_table_index, next_table_index, table_length, datagram_index, datagram_length) without proper bounds checks against skb->len. Thi...