CVE-2026-22978

wifi: avoid kernel-infoleak from struct iw_point

State: Published
Severity: Not scored
Published: Jan 23, 2026
Updated: May 11, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: avoid kernel-infoleak from struct iw_point

struct iw_point has a 32bit hole on 64bit arches.

struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ };

Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before d943b5f592767b107ba8c12a902f17431350378cAffected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before a3827e310b5a73535646ef4a552d53b3c8bf74f6Affected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 442ceac0393185e9982323f6682a52a53e8462b1Affected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8Affected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 024f71a57d563fbe162e528c8bf2d27e9cac7c7bAffected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before e3c35177103ead4658b8a62f41e3080d45885464Affected 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 21cbf883d073abbfe09e3924466aa5e0449e7261Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.10.248 through 5.10.Not affected 5.15.198 through 5.15.Not affected 6.1.161 through 6.1.Not affected 6.6.121 through 6.6.Not affected 6.12.66 through 6.12.Not affected 6.18.6 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before d943b5f592767b107ba8c12a902f17431350378cAffected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before a3827e310b5a73535646ef4a552d53b3c8bf74f6Affected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 442ceac0393185e9982323f6682a52a53e8462b1Affected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8Affected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 024f71a57d563fbe162e528c8bf2d27e9cac7c7bAffected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before e3c35177103ead4658b8a62f41e3080d45885464Affected
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 to before 21cbf883d073abbfe09e3924466aa5e0449e7261Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.10.248 through 5.10.*Not affected
5.15.198 through 5.15.*Not affected
6.1.161 through 6.1.*Not affected
6.6.121 through 6.6.*Not affected
6.12.66 through 6.12.*Not affected
6.18.6 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.