12 matches found
SUSE CVE-2026-93790
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
AZL-103802 CVE-2026-93790 affecting package kernel for versions less than 6.6.158.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-93791
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...
UBUNTU-CVE-2026-93790
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-93790 wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-93790
The Linux kernel contains an out-of-bounds access vulnerability in the wifi: iwlwifi: mvm component. The issue occurs because mvmsta->tid_data is indexed by the TFD loop counter i instead of the actual tid value, resulting in lq_color being written into a random, unrelated tid_data slot during...
EUVD-2026-86177
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-93791 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because the tiddata array uses the TFD loop counter ‘i’ instead of the actual TID value ‘tid’ for indexing, resulting in an out-of-bounds access. Additionally, lqcolor is...
Linux Distros Unpatched Vulnerability : CVE-2026-93790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'...
CVE-2026-93790
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...
CVE-2026-93790: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tiddata access in BA notif mvmsta-tiddata was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lqcolor into a random tiddata slot unrelated to the BA...