CVE-2026-74413

Received Received - Intake

Type Confusion in Linux Kernel RTW89 WiFi Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers rtw89 stores an ieee80211_hw pointer via pci_set_drvdata() at probe time, but io_error_detected() and io_resume() retrieve it as a net_device pointer. This causes netif_device_detach/attach to operate on an ieee80211_hw struct, reading and writing at wrong offsets. The adjacent io_slot_reset() already does it correctly. Use ieee80211_stop_queues/wake_queues instead, consistent with every other queue stop/start path in the driver. Tested on RTL8852CE by calling the handlers from a test module before and after the fix.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74413

EUVD

EUVD-2026-59560

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the rtw89 WiFi driver. It involves a type mismatch where PCI error handlers incorrectly retrieve a net_device pointer instead of the ieee80211_hw pointer stored during device initialization. This causes wrong memory offsets to be accessed when stopping or resuming network interfaces.

Detection Guidance

This vulnerability affects the Linux kernel's rtw89 WiFi driver and involves incorrect pointer handling in PCI error recovery handlers. Detection requires checking the kernel version and loaded rtw89 module. Use commands like 'uname -a' to check kernel version and 'lsmod | grep rtw89' to verify if the vulnerable driver is loaded.

Impact Analysis

The vulnerability could cause system instability or crashes when PCI bus errors occur in affected WiFi hardware. It may lead to network connectivity issues or kernel panics due to incorrect memory access during error recovery.

Compliance Impact

This vulnerability affects the Linux kernel's WiFi driver (rtw89) by causing incorrect pointer handling in PCI error recovery handlers. This could lead to improper device state management, potentially disrupting network connectivity or causing system instability. For compliance with standards like GDPR or HIPAA, which require robust data protection and system reliability, this issue may introduce risks related to data transmission integrity and availability. However, no direct evidence in the provided text links this vulnerability to specific compliance violations or data breaches.

Mitigation Strategies

Update your Linux kernel to a patched version where this issue is resolved. If using a distribution kernel, apply available updates via your package manager. For custom kernels, recompile with the fix applied. Monitor vendor advisories for kernel updates addressing this CVE.

Hi! I’m here to help you understand CVE-2026-74413. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70