CVE-2026-98830 wifi: wfx: validate MIB read length before copying to caller

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfxhifreadmib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed vallen. A firmware...

CVE-2026-98830

The Linux kernel contains a vulnerability in the wifi: wfx component. The function wfx_hif_read_mib() fails to validate that the reply->length from a firmware response does not exceed the val_len of the caller-provided buffer. This lack of bounds checking allows a firmware response with an ove...

EUVD-2026-103770

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfxhifreadmib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed vallen. A firmware...

CVE-2026-98830 wifi: wfx: validate MIB read length before copying to caller

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfxhifreadmib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed vallen. A firmware...

CVE-2026-98830

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfxhifreadmib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed vallen. A firmware...

CVE-2026-98830: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfxhifreadmib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed vallen. A firmware...

PT-2026-117049

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx hif read mib copies reply-length bytes from the firmware response into the caller-provided buffer without checking that reply-length does not exceed val len. A...

DEBIAN-CVE-2024-26896

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...

AZL-58915 CVE-2024-26896 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...

CVE-2024-26896

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...

UBUNTU-CVE-2024-26896

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...

CVE-2024-26896 wifi: wfx: fix memory leak when starting AP

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 size 184: comm "wpasupplicant", pid 1559, jiffies 13006305 age 964.245s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 ...

AZL-54262 CVE-2023-52593 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfxsetmfpap Since 'ieee80211beaconget' can return NULL, 'wfxsetmfpap' should check the return value before examining skb data. So convert the latter to return an appropriate err...

UBUNTU-CVE-2023-52593

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfxsetmfpap Since 'ieee80211beaconget' can return NULL, 'wfxsetmfpap' should check the return value before examining skb data. So convert the latter to return an appropriate err...