CVE-2026-93791wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid is a firmware-controlled u8 that is used directly as an array index into tid_data[] without any validation. Add a bounds check against IWL_MAX_TID_COUNT before dereferencing the array.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c46e7724bfe9bbff17bc468903a757248b99e4ed before 0f690fd3b5535d110898b99ae6214f29c9060941; from c46e7724bfe9bbff17bc468903a757248b99e4ed before 0b5325a0771674f1d65618de7db3df9d49186a12; from c46e7724bfe9bbff17bc468903a757248b99e4ed before 59f64c2839022f41a7867b38f9e38c185ff39283; from c46e7724bfe9bbff17bc468903a757248b99e4ed before 0e4c0d83267261cf67ec9690856edf4a56bb7dfc | CNA record |
References
- https://git.kernel.org/stable/c/0f690fd3b5535d110898b99ae6214f29c9060941
- https://git.kernel.org/stable/c/0b5325a0771674f1d65618de7db3df9d49186a12
- https://git.kernel.org/stable/c/59f64c2839022f41a7867b38f9e38c185ff39283
- https://git.kernel.org/stable/c/0e4c0d83267261cf67ec9690856edf4a56bb7dfc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.