CVE-2026-93063

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mei: check SAP message length before reading it

Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa29e442ee110aafdf7785fac6de44b22d3da43db < a4034f1cc8a422cefc519290d8e6cfb7ff773586affected
LinuxLinuxbcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e < b90ebae632318dc2e5cd4ac96e454ec50f705579affected
LinuxLinuxbcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e < 9c6bea89a16815688a5240dd4a74c922a92fcdc3affected
LinuxLinuxbcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e < 242125bbf19a2974d22f3d5025c9c14c0a4aea58affected
LinuxLinuxbcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e < f7f770d12e6e928006f89a59291074e5fea82886affected
LinuxLinuxbcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e < 7d8cc301bcba233f31b589a45f4c1c97f2bb90d6affected
LinuxLinux9f71cebcac2148e68d0d67f113d0f9aabfcc7a2aaffected
LinuxLinux6.1.2 < 6.1.188affected
LinuxLinux6.0.16 < 6.1affected
LinuxLinux6.2affected
LinuxLinux0 < 6.2unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References