CVE-2026-97500

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: phy: check length before parsing PHY status IE

Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 72bf6944e336d6f046f5c886ebededdd6560a693affected
LinuxLinuxe3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 213f9e0ab2b4f35fe8d342333238c6cc91513fbfaffected
LinuxLinuxe3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 98e5720afd7495eece580238f232e3b3b4c022daaffected
LinuxLinuxe3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 884495c39de1a02f42bd40051b921e2311d6ac91affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux6.6.158 <= 6.6.*unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References