CVE-2026-93281

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: fix HE extended capability length check

rtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes.

Require datalen >= 11 before reading data[10].

Affected Software

VendorProductVersion RangeStatus
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < eddf53f1edb0cf7f302bd15cdb47cca90948c205affected
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < 655c4401c18d735dbaf2cc172ff4f626b3a896a0affected
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < bddbd1de765bf6ddc0473ad683910eb3a2a92a43affected
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < f2a01deff7d0d5cc3dcbf2358dac113979303c8eaffected
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < f132fc01b359a0f7d81fe13d769ea4e7c4baa66eaffected
LinuxLinux8d540f9d29162e273797bef36686a010724f0f8a < 2aba608a86e9b099c9af2ea70b620552dee2b628affected
LinuxLinux6.1affected
LinuxLinux0 < 6.1unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References