CVE-2026-74340
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware-controlled rsp->count field is used as the loop bound for indexing into the flexible rsp->regs[] array without validation against the message length. A count exceeding the actual data causes out-of- bounds reads from the heap-allocated message buffer. Add a check that count fits within the received message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74340
EUVD
EUVD-2026-59487

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's wifi driver wcn36xx. It involves an out-of-bounds (OOB) read issue where the firmware-controlled count field is used to index into an array without validation. If the count exceeds the actual data length, it causes reads beyond the allocated buffer.

Detection Guidance

This vulnerability involves an out-of-bounds read in the Linux kernel's wcn36xx WiFi driver due to unvalidated firmware-controlled count fields. Detection requires checking for kernel logs or crashes related to WiFi driver errors, particularly involving wcn36xx or firmware communication issues.

Impact Analysis

This vulnerability could allow an attacker to read sensitive kernel memory, potentially leading to information disclosure or privilege escalation. It may cause system instability or crashes if exploited.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve this issue. If immediate patching is not possible, consider disabling the wcn36xx WiFi driver if not in use or restrict network access to untrusted sources until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74340. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart