Buffer Overflow in Linux Kernel WiFi Driver

Publication date: 2026-05-06

Last updated on: 2026-05-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate release report content before using for RTL8922DE The commit 957eda596c76 ("wifi: rtw89: pci: validate sequence number of TX release report") does validation on existing chips, which somehow a release report of SKB becomes malformed. As no clear cause found, add rules ahead for RTL8922DE to avoid crash if it happens.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-06

Last Modified

2026-05-08

Generated

2026-07-06

AI Q&A

2026-05-06

EPSS Evaluated

2026-07-05

NVD

CVE-2026-43176

EUVD

EUVD-2026-27736

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's wifi driver for the rtw89 chipset, specifically related to the PCI interface. It involves the handling of the TX release report for the RTL8922DE chip. The issue arises because the release report of SKB (socket buffer) can become malformed, and without proper validation, this can lead to a crash. The fix involves validating the sequence number of the TX release report to prevent crashes caused by malformed reports.

Impact Analysis

This vulnerability can cause the Linux kernel to crash when handling malformed TX release reports from the RTL8922DE wifi chipset. Such crashes can lead to system instability, potential denial of service, and disruption of network connectivity.

Hi! I’m here to help you understand CVE-2026-43176. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70