Not yet scoredPublished Sep 24, 2026

CVE-2026-93797wifi: iwlwifi: mvm: fix an off-by-1 boundary check

Updated under an hour ago (Oct 26, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 2c8c06c59ed72a42e4d32e222542b582b4911459; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 45fcdbae679861b90f08964a0c3e9eead3bacd6f; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before 7a2d4efea2c41b49db90907c8b6f37f8b63a9f50; 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 1e3b72c9b63288a5f204e2c8f38eae01515d7dc5; 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 builds before 4d60332387336088e66cc8f1e71e516b6b872ef9; from 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 before d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8	CNA record

References

References

https://git.kernel.org/stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459
https://git.kernel.org/stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019
https://git.kernel.org/stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6f
https://git.kernel.org/stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50
https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5
https://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9
https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.