6873 matches found
CVE-2026-98349 wifi: libipw: reject too-short beacon and probe responses
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...
CVE-2026-98349
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...
CVE-2026-98349
The Linux kernel contains a vulnerability in the wifi: libipw component within the libipw_process_probe_response() and libipw_network_init() functions. The root cause is an integer underflow where the code assumes a 36-byte beacon/probe response prefix, but the ipw2100 and ipw2200 receive paths o...
CVE-2026-98340
The Linux kernel contains a vulnerability in the cfg80211 WiFi stack where the [34m[1m__cfg80211_bss_update()[0m function incorrectly groups hidden BSSes**. Specifically, it may group a probe response for an unknown BSS with an existing entry that lacks beacon elements, creating a group withou...
CVE-2026-98340 wifi: cfg80211: only group hidden BSSes with beacon entries
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry with the same BSSID and a hidden zero-length or NUL-filled SSID, and if ...
CVE-2026-98328 wifi: mac80211: add HE 6 GHz capability in the scan elems len
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scanieslen. Otherwise, building probe request...
CVE-2026-98328 wifi: mac80211: add HE 6 GHz capability in the scan elems len
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scanieslen. Otherwise, building probe request...
CVE-2026-98209 mmc: sdhci-of-aspeed: Remove children before releasing SDC resources
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...
CVE-2026-98209
The Linux kernel contains a vulnerability in the mmc: sdhci-of-aspeed driver where probe failures and removals leave SDHCI child devices registered after the parent clock and managed resources are released. The root cause is the improper sequence of resource release; the fix involves unregisterin...
CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98349: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...
CVE-2026-98186: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
Linux Distros Unpatched Vulnerability : CVE-2026-98209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and...
Linux Distros Unpatched Vulnerability : CVE-2026-98340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry wit...
Linux Distros Unpatched Vulnerability : CVE-2026-98328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported,...
PT-2026-106678
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the libipw component of the wifi subsystem where libipw process probe response and libipw network init assume a frame contains a full 36-byte beacon and probe response...
PT-2026-106646
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the neighbour subsystem where the NDTPA INTERVAL PROBE TIME MS parameter lacks proper validation because the .validation type is not set. This allows values to bypass...
CVE-2026-105682
Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server. This issue is fixed in version 6.27.0...
CVE-2026-105682
The Ghost Node.js content management system contains a Server-Side Request Forgery (SSRF) vulnerability in its webhooks feature . This flaw allows staff users to probe internal hosts from the Ghost server. The issue affects versions 1.18.0 through 6.27.0 . This vulnerability is resolved in versio...
CVE-2026-105682 Ghost: Server-Side Request Forgery in Webhook Trigger
Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server. This issue is fixed in version 6.27.0...