CVE-2026-43176
Awaiting Analysis Awaiting Analysis - Queue
Buffer Overflow in Linux Kernel WiFi Driver

Publication date: 2026-05-06

Last updated on: 2026-05-08

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 ("wifi: rtw89: pci: validate sequence number of TX release report") does validation on existing chips, which somehow a release report of SKB becomes malformed. As no clear cause found, add rules ahead for RTL8922DE to avoid crash if it happens.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-06
Last Modified
2026-05-08
Generated
2026-06-16
AI Q&A
2026-05-06
EPSS Evaluated
2026-06-15
NVD
CVE-2026-43176
EUVD
EUVD-2026-27736
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's wifi driver for the rtw89 chipset, specifically related to the PCI interface. It involves the handling of the TX release report for the RTL8922DE chip. The issue arises because the release report of SKB (socket buffer) can become malformed, and without proper validation, this can lead to a crash. The fix involves validating the sequence number of the TX release report to prevent crashes caused by malformed reports.

Impact Analysis

This vulnerability can cause the Linux kernel to crash when handling malformed TX release reports from the RTL8922DE wifi chipset. Such crashes can lead to system instability, potential denial of service, and disruption of network connectivity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43176. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart