CVE-2026-93796wifi: iwlwifi: pcie: null RX pointers after free
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwl_pcie_tx_init() fails after RX init, nic init unwinds via iwl_pcie_rx_free(). The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touch stale RX state. Set rx_pool, global_table, rxq, and alloc_page to NULL after free to make repeated cleanup and retry paths safe.
- CVSS
- 7.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 25, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 9cf671d60fdbeb8f875859c11148cf13c326ada2 builds before 6ec5bf430cf7466cb412e47f2761594092781fac; from 9cf671d60fdbeb8f875859c11148cf13c326ada2 before 3456c5bcc987aeb182e50e30c9b02be8420e9953; 9cf671d60fdbeb8f875859c11148cf13c326ada2 builds before 2c79d7a7b583050c9f58041465cb46fe3483ab5d | CNA record |
References
- https://git.kernel.org/stable/c/6ec5bf430cf7466cb412e47f2761594092781fac
- https://git.kernel.org/stable/c/3456c5bcc987aeb182e50e30c9b02be8420e9953
- https://git.kernel.org/stable/c/2c79d7a7b583050c9f58041465cb46fe3483ab5d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.