CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

EUVD-2026-59472

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: use kfreercu for offchannel link in mt76putvifphylink mt76putvifphylink frees the offchannel mlink with plain kfree after rcuassignpointerNULL. However, rcuassignpointer only prevents future RCU readers from obtaining...

CVE-2026-72070

CVE-2026-72070 affects the Linux kernel driver for libertas_tf (wifi) and describes a use-after-free in lbtf_free_adapter(). The issue arises because lbtf_free_adapter() calls timer_delete(&priv->command_timer) in teardown, which does not wait for an in-flight command_timer_fn() callback that ...

CVE-2026-72003 wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

PT-2026-72213

In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk local-interfaces under RCU. The bulk hardware teardown path removes entries with list del, so an asynchronous transmit completion can...

Linux Distros Unpatched Vulnerability : CVE-2026-68471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE type...

PT-2026-72849

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pci get drvdata type in AER handlers rtw89 stores an ieee80211 hw pointer via pci set drvdata at probe time, but io error detected and io resume retrieve it as a net device pointer. This causes netif device...

MINI-RGPR-299R-V6RF

Bulletin has no description...

The vulnerability of the wireless/realtek/rtw88/rtw8822b.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wireless/realtek/rtw88/rtw8822b.c component of the Linux operating system is related to incomplete recognition of its internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the wireless/wext-core.c component of the Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the wireless/ti/wlcore/tx.c component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer’s initial limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-24911

Stack-based buffer overflow for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-24099

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-22887

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-20890

Improper privilege management for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2026-20891

Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

CVE-2026-20878

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20789

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

CVE-2026-20886

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...