Описание
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath6kl: avoid buffer overreads in WMI event handlers
The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx()
Add length checks to prevent overread.
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath6kl: avoid buffer overreads in WMI event handlers
The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx()
Add length checks to prevent overread.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-92498
- https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0
- https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc
- https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606
- https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b
- https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa
- https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d
- https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe
- https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be
EPSS
CVE ID
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
In the Linux kernel, the following vulnerability has been resolved: w ...
ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)
EPSS