CVE-2026-93802wifi: rsi: validate beacon length before fixed buffer copy
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsi_prepare_beacon() copies the mac80211 beacon frame after FRAME_DESC_SZ into a management skb whose usable tailroom may be smaller than MAX_MGMT_PKT_SIZE after alignment. Validate the beacon length against the actual tailroom before the copy and skb_put(). Leave ownership of the management skb with the caller on error, matching the existing rsi_send_beacon() cleanup path.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 795ba65f46fe44061f1195951c122cc8ec685d44; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 66a964432b2758a4cf69962366e37581d6e70632; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 7f99742c3c2801f8033d8b7a0a58254d7f24fb1e; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before f08d7f3c916335a0e539f1c45c130615967fac47; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 87710ad633ce4588aec88611d0d0745eb33a6991; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 266f195d5a14eec6c482fd09fbc924584c3371a7; from d26a9559403c7c3ec3b430f5825bc22c3d40abdb before 8ecdeb8b8a33b22c597299043c0dcfce50beb9ea | CNA record |
References
- https://git.kernel.org/stable/c/795ba65f46fe44061f1195951c122cc8ec685d44
- https://git.kernel.org/stable/c/66a964432b2758a4cf69962366e37581d6e70632
- https://git.kernel.org/stable/c/7f99742c3c2801f8033d8b7a0a58254d7f24fb1e
- https://git.kernel.org/stable/c/f08d7f3c916335a0e539f1c45c130615967fac47
- https://git.kernel.org/stable/c/87710ad633ce4588aec88611d0d0745eb33a6991
- https://git.kernel.org/stable/c/266f195d5a14eec6c482fd09fbc924584c3371a7
- https://git.kernel.org/stable/c/8ecdeb8b8a33b22c597299043c0dcfce50beb9ea
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.