PT-2026-98003

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the libipw rx function where the system fails to properly validate the length of the socket buffer skb before accessing the WEP key index. Specifically, the guard only...

CVE-2026-93830: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

Linux Distros Unpatched Vulnerability : CVE-2026-93830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC...

PT-2026-98005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the wifi cfg80211 component. The functions cfg80211 rx mlme mgmt and cfg80211 tx mlme mgmt fail to properly validate the length of frames relative t...

PT-2026-98006

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 rx assoc resp function where the status and response-IE fields of cfg80211 connect resp params are initialized from the management frame before verifying ...

PT-2026-97965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the octeon staging driver. The cvm oct rx shutdown function calls free irq and netif napi del without first disabling the NAPI instance. Since free irq...

CVE-2026-93830

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

CVE-2026-93796: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

Linux Distros Unpatched Vulnerability : CVE-2026-93796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NUL...

PT-2026-98076

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where hardware may provide packets with a length exceeding the maximum native Wi-Fi header length. This can lead to the ath11k dp rx h undecap nwifi function accessing an...

PT-2026-96273

Name of the Vulnerable Software and Affected Versions Espressif ESP-hosted Wi-Fi driver affected versions not specified Description The driver parses frames received over SPI from the ESP co-processor in the esp hosted event task function. For control frames, the driver uses the 16-bit TLV field...

Linux Distros Unpatched Vulnerability : CVE-2026-93091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Quiesce notifications before teardown scminotificationexit clears and releases the notification instance, but transport callbacks can still...

Linux Distros Unpatched Vulnerability : CVE-2026-90377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed an...

AZL-102384 CVE-2026-90382 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a...

CVE-2026-90382

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a...

DEBIAN-CVE-2026-90382

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail filter enabled, the hardware passes up corrupted frames, and a...

DEBIAN-CVE-2026-90377

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix RX data queuing of RRO 3.0 For RRO 3.0, RX data released from a RRO data queue should be put to the indicator queue. The frames are processed and completed in the context of the indicator queue NAPI, which only...

DEBIAN-CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-93091 firmware: arm_scmi: Quiesce notifications before teardown

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Quiesce notifications before teardown scminotificationexit clears and releases the notification instance, but transport callbacks can still deliver incoming notifications until the TX/RX channels are freed...

CVE-2026-93091

CVE-2026-93091 affects the arm_scmi firmware driver in the Linux kernel. During device removal or probe error teardown, scmi_notification_exit() releases the notification instance before the TX/RX transport channels are freed, allowing an RX interrupt to call scmi_notify() and dereference freed m...