7

CVE-2026-93796

wifi: iwlwifi: pcie: null RX pointers after free

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: pcie: null RX pointers after free

When iwl_pcie_tx_init() fails after RX init, nic init unwinds via
iwl_pcie_rx_free().

The freed RX members stayed non-NULL on the live transport object,
so later teardown or retry could touch stale RX state.
Set rx_pool, global_table, rxq, and alloc_page to NULL after free
to make repeated cleanup and retry paths safe.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9cf671d60fdbeb8f875859c11148cf13c326ada2
Version < 6ec5bf430cf7466cb412e47f2761594092781fac
Status affected
Version 9cf671d60fdbeb8f875859c11148cf13c326ada2
Version < 3456c5bcc987aeb182e50e30c9b02be8420e9953
Status affected
Version 9cf671d60fdbeb8f875859c11148cf13c326ada2
Version < 2c79d7a7b583050c9f58041465cb46fe3483ab5d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.12
Status affected
Version 0
Version < 5.12
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6ec5bf430cf7466cb412e47f2761594092781fac
https://git.kernel.org/stable/c/3456c5bcc987aeb182e50e30c9b02be8420e9953
https://git.kernel.org/stable/c/2c79d7a7b583050c9f58041465cb46fe3483ab5d