Riskcovery

CVE-2026-93063

wifi: iwlwifi: mei: check SAP message length before reading it

State
Published
Severity
8.4 High
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mei: check SAP message length before reading it

Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a29e442ee110aafdf7785fac6de44b22d3da43db to before a4034f1cc8a422cefc519290d8e6cfb7ff773586Affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to before b90ebae632318dc2e5cd4ac96e454ec50f705579Affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to before 9c6bea89a16815688a5240dd4a74c922a92fcdc3Affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to before 242125bbf19a2974d22f3d5025c9c14c0a4aea58Affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to before f7f770d12e6e928006f89a59291074e5fea82886Affected
  • bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e to before 7d8cc301bcba233f31b589a45f4c1c97f2bb90d6Affected
  • 9f71cebcac2148e68d0d67f113d0f9aabfcc7a2aAffected
  • 6.1.2 to before 6.1.188Affected
  • 6.0.16 to before 6.1Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.