8.8

CVE-2026-93790

wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif

mvmsta->tid_data was indexed by the TFD loop counter 'i' instead of
the actual TID value 'tid'. This writes lq_color into a random tid_data
slot unrelated to the BA entry.
Since multi-TID blockack is not really in use, 'i' was always 0 and no
harm was done.
Add a out-of-bound check before accessing the array.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 41fd2fec56db2564f02532ed7244e1f69193b4ad
Version < 35f991d685feafd27255bd33272512c434e52527
Status affected
Version 41fd2fec56db2564f02532ed7244e1f69193b4ad
Version < c48b741277b01b2c3b4ecccedc72fc575b71dc04
Status affected
Version 41fd2fec56db2564f02532ed7244e1f69193b4ad
Version < e8ac5e91b1296f65c3d119fac3fa917ff458f811
Status affected
Version 41fd2fec56db2564f02532ed7244e1f69193b4ad
Version < 94d3982806c7f194b23484befde12934dda23064
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.15
Status affected
Version 0
Version < 4.15
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.133
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c48b741277b01b2c3b4ecccedc72fc575b71dc04
https://git.kernel.org/stable/c/e8ac5e91b1296f65c3d119fac3fa917ff458f811
https://git.kernel.org/stable/c/94d3982806c7f194b23484befde12934dda23064
https://git.kernel.org/stable/c/35f991d685feafd27255bd33272512c434e52527