Linux Distros Unpatched Vulnerability : CVE-2026-90398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len i...

Linux Distros Unpatched Vulnerability : CVE-2026-90399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

CVE-2026-54626 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGAINDEXEDRLE path selected by imagetype == 9 allocates an image buffer using the one-byte-per-pixel SAILPIXELFORMATBPP8INDEXED format returned by...

CVE-2026-90398

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct wmimacphycapabilities. The...

DEBIAN-CVE-2026-90399

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

CVE-2026-90399

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

DEBIAN-CVE-2026-90398

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct wmimacphycapabilities. The...

AZL-102621 CVE-2026-90399 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

CVE-2026-90399 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

CVE-2026-90399

This Linux kernel vulnerability affects the ath12k WiFi driver (Qualcomm WCN7850 hardware). In ath12k_wmi_mac_phy_caps_parse(), the buffer is allocated with a size of tot_phy_id * len where len is clamped to min(firmware_len, sizeof(struct)), but the subsequent memcpy() advances the destination b...

EUVD-2026-82060

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

CVE-2026-90399 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix stride mismatch in macphycapsparse Currently, in ath12kwmimacphycapsparse, kzalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct ath12kwmimacphycapsparams. The...

CVE-2026-90398 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct wmimacphycapabilities. The...

CVE-2026-90398

CVE-2026-90398 is a buffer overflow in the Linux kernel's ath11k WiFi driver , specifically in ath11k_wmi_tlv_mac_phy_caps_parse(). The allocation via kcalloc() sizes the buffer using a clamped length, but the subsequent memcpy() advances by the full struct size per slot. When firmware supplies s...

EUVD-2026-82059

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct wmimacphycapabilities. The...

CVE-2026-90398 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix stride mismatch in macphycapsparse Currently, in ath11kwmitlvmacphycapsparse, kcalloc sizes the macphycaps buffer as totphyid len, where len is clamped to minfirmwarelen, sizeofstruct wmimacphycapabilities. The...

PT-2026-94747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stride mismatch exists in the ath12k wmi mac phy caps parse function. The kzalloc function sizes the mac phy caps buffer using a clamped length, but the subsequent memcpy operation...

PT-2026-94746

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stride mismatch exists in the ath11k wmi tlv mac phy caps parse function. The kcalloc function sizes the mac phy caps buffer using a clamped length, but the subsequent memcpy operation...

SUSE CVE-2026-68262

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvrsetuobjarray pvrsetuobjarray copies an array of kernel objects to a userspace array whose element size is described by out-stride. When out-stride is different from the kernel object...