Riskcovery

CVE-2026-46092

wifi: rtw88: check for PCI upstream bridge existence

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
Oct 15, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: check for PCI upstream bridge existence

pci_upstream_bridge() returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash. This has probably been unnoticed as 8821CE is mostly supplied in laptops where there is a PCI-to-PCI bridge located upstream from the device. However the card might be installed on a system with different configuration.

Check if the bridge does exist for the specific workaround to be applied.

Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 617339466fda09916c4b4151fa5e6a9c1fdae353 to before 959c13da6c36167ce1016d400a6104d2367f686eAffected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before 3b89b4c095804c478d50376285e66700cf3c045fAffected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before cc9b6303e7ea91bc360b42c7edc1fe9ceb2f47feAffected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before 6c53d68e3bcfc8faccdd76c3383a9232b05c9ae6Affected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before 000134a20bbf89b1152520a2eef71f91fdb83a5bAffected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before 3bbbb56204f7359ce2139a9341b43b52a186261cAffected
  • 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a to before eb101d2abdcccb514ca4fccd3b278dd8267374f6Affected
  • f21e8cb927fa9da49490b74ddda3856a828b82d6Affected
  • 5.15.17 to before 5.15.210Affected
  • 5.16.3 to before 5.17Affected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 5.15.210 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.86 through 6.12.*Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.