112 matches found
CVE-2026-93807
The Linux kernel contains a vulnerability in the wifi: rsi component where the rsi_hal_load_key() function performs unconditional copies of tx_mic_key and rx_mic_key from specific offsets within the key data. Because these offsets are part of the 32-byte TKIP key layout, using shorter keys for ot...
CVE-2026-93802
The Linux kernel is affected by a vulnerability in the wifi: rsi component. The rsi_prepare_beacon() function fails to validate the beacon length before copying the mac80211 beacon frame into a management skb. This can lead to a buffer copy issue because the usable tailroom of the skb may be smal...
EUVD-2026-86189
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsipreparebeacon copies the mac80211 beacon frame after FRAMEDESCSZ into a management skb whose usable tailroom may be smaller than MAXMGMTPKTSIZE after alignment. Valida...
CVE-2026-93266
The Linux kernel on arm64 architecture contains a vulnerability in the RSI attestation token initialization (rsi_attestation_token_init). The root cause is a field-spanning write triggered by FORTIFY when copying a 64-byte challenge into the ®s.a1 field, which is treated as an 8-byte destinati...
EUVD-2026-86138
In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to ®s.a1 makes FORTIFY treat the destination as the single a1 field, resulting in a...
The vulnerability of the rsi_kill_thread() function in the drivers/net/wireless/rsi/rsi_common.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the rsikillthread function in the drivers/net/wireless/rsi/rsicommon.h file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the rsi_mac80211_attach() function in the drivers/net/wireless/rsi/rsi_91x_mac80211.c driver for wireless communication adapters in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the rsimac80211attach function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver for wireless communication adapters in the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the rsi_coex_attach() function in the drivers/net/wireless/rsi/rsi_91x_coex.c driver for wireless communication adapters in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the rsicoexattach function in the drivers/net/wireless/rsi/rsi91xcoex.c file of the wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Malicious Package
Overview @rsi-community/hub-schema is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
AZL-88905 CVE-2026-46187 affecting package kernel for versions less than 6.6.141.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exitkthreadcompleteandexit and external-stop kthreadstop when killing a kthread. Generally, kthreadstop is called first, and in thi...
UBUNTU-CVE-2026-46187
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exitkthreadcompleteandexit and external-stop kthreadstop when killing a kthread. Generally, kthreadstop is called first, and in thi...
CVE-2026-46187
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exitkthreadcompleteandexit and external-stop kthreadstop when killing a kthread. Generally, kthreadstop is called first, and in thi...
CVE-2026-46187 wifi: rsi: fix kthread lifetime race between self-exit and external-stop
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exitkthreadcompleteandexit and external-stop kthreadstop when killing a kthread. Generally, kthreadstop is called first, and in thi...
CVE-2026-46187
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix kthread lifetime race between self-exit and external-stop RSI driver use both self-exitkthreadcompleteandexit and external-stop kthreadstop when killing a kthread. Generally, kthreadstop is called first, and in thi...
CVE-2026-46187
CVE-2026-46187 – summary of documented fixes : In the Linux kernel, the wifi: rsi driver experienced a kthread lifetime race between self-exit and external-stop, causing a UAF if the exited thread is accessed after free. The confirmed remediation is to remove kthread_stop() and wait for the self-...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013776)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013776 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory leak in rsicoexattach The coexcb needs to be freed when rsicreatekthread...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011026)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011026 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory leak in rsicoexattach The coexcb needs to be freed when rsicreatekthread...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007550)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007550 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory leak in rsicoexattach The coexcb needs to be freed when rsicreatekthread...
SUSE CVE-2026-23373
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsimac80211config This triggers a WARNON in ieee80211hwconfinit and isn't the expected behavior from the driver - other drivers default to 0 too...
CVE-2026-23373
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsimac80211config This triggers a WARNON in ieee80211hwconfinit and isn't the expected behavior from the driver - other drivers default to 0 too...