Riskcovery

CVE-2026-93799

wifi: iwlwifi: mvm: validate sta_id in BA window status notif

State
Published
Severity
8.8 High
Published
Sep 24, 2026
Updated
Oct 3, 2026
Reserved
Sep 18, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: validate sta_id in BA window status notif

BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from the firmware notification and uses it to index fw_id_to_mac_id[] without bounds checking. Validate sta_id before array access to prevent out-of-bounds indexing.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3af512d6aac7eb6420086f124abb4426f5f4b369 to before f9938eb95e2ddab4a58d3946a320abcbd60b56a4Affected
  • 3af512d6aac7eb6420086f124abb4426f5f4b369 to before bb08fbbbd5568d33069485ecb0a1657f115a4e9fAffected
  • 3af512d6aac7eb6420086f124abb4426f5f4b369 to before e35ae757c6462bfd3437bf58121bb721fe1f790cAffected
  • 3af512d6aac7eb6420086f124abb4426f5f4b369 to before 6aa77efaea9efea92e3090c35ad348fd759a3cf3Affected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.