Riskcovery

CVE-2026-93789

wifi: iwlwifi: bound aligned TLV advance in FW parser

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Oct 3, 2026
Reserved
Sep 18, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: bound aligned TLV advance in FW parser

Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image.

This avoids length underflow on malformed TLVs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before 61da42fdd21d98ccb8f1ec5224659f3d09202cf4Affected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before 8c332d45b736d41301b7e07f322785d821265dbcAffected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before ce709fcab5e1d4df6d4ba980736dc5908502a40fAffected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before 4cfadb2e01566bc36d42922fbe18838345087050Affected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before 528fa9eb14c209533ca26958b76da55e0ce239d8Affected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before 7aa9097623afb694bc25382a62e14d8e82bf002fAffected
  • dd7a2509b3a79b290730a9c6a784bf03fedabb9a to before acad742714bdc70e7fd7f234323807c596828213Affected
LinuxLinux
  • 2.6.35Affected
  • before 2.6.35Not affected
  • 5.10.271 through 5.10.*Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.