CVE-2026-97500

wifi: rtw89: phy: check length before parsing PHY status IE

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 30, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: phy: check length before parsing PHY status IE

Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before a8659bacf9a2a4f33690c573f35bb5b11d06bf12Affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 72bf6944e336d6f046f5c886ebededdd6560a693Affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 213f9e0ab2b4f35fe8d342333238c6cc91513fbfAffected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 98e5720afd7495eece580238f232e3b3b4c022daAffected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 884495c39de1a02f42bd40051b921e2311d6ac91Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.191 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before a8659bacf9a2a4f33690c573f35bb5b11d06bf12Affected
e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 72bf6944e336d6f046f5c886ebededdd6560a693Affected
e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 213f9e0ab2b4f35fe8d342333238c6cc91513fbfAffected
e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 98e5720afd7495eece580238f232e3b3b4c022daAffected
e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd to before 884495c39de1a02f42bd40051b921e2311d6ac91Affected

LinuxLinux

5.16Affected
before 5.16Not affected
6.1.191 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.