Back to CVE records
Not yet scoredPublished Sep 24, 2026
CVE-2026-93797wifi: iwlwifi: mvm: fix an off-by-1 boundary check
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 2c8c06c59ed72a42e4d32e222542b582b4911459; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 45fcdbae679861b90f08964a0c3e9eead3bacd6f; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 7a2d4efea2c41b49db90907c8b6f37f8b63a9f50; 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 1e3b72c9b63288a5f204e2c8f38eae01515d7dc5; 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 4d60332387336088e66cc8f1e71e516b6b872ef9; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8 | CNA record |
References
- https://git.kernel.org/stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459
- https://git.kernel.org/stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019
- https://git.kernel.org/stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6f
- https://git.kernel.org/stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50
- https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5
- https://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9
- https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.