CVE-2026-100078

Undergoing Analysis Undergoing Analysis - In Progress

Wi-Fi Driver Argument Passing Flaw in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-10-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwl_mei_write_cyclic_buf() should be the cldev but the q_head pointer is passed instead. Fix it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-02

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-100078

EUVD

EUVD-2026-87058

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.52 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.2.6 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.157 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.110 (exc)
linux	linux_kernel	From 5.17 (inc) to 6.1.188 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's iwlwifi driver for Intel Wi-Fi devices. It involves a function call where the wrong argument is passed. Specifically, the function iwl_mei_write_cyclic_buf() should receive the device context (cldev) as its first argument, but instead receives a queue head pointer (q_head). This is a programming error that could lead to incorrect behavior in the driver.

Detection Guidance

This vulnerability is specific to the Linux kernel's iwlwifi driver and involves a function argument error in the MEI interface. Detection requires checking kernel logs for related errors or kernel crashes involving the iwlwifi module. Commands like 'dmesg | grep iwlwifi' or 'journalctl -k | grep iwlwifi' may help identify issues.

Impact Analysis

This vulnerability may cause the Intel Wi-Fi driver to malfunction, potentially leading to unstable or unreliable wireless network connections. In severe cases, it could result in system crashes or unexpected behavior when using Wi-Fi on affected devices.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel driver issue without implications for data protection or privacy requirements.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If using a distribution kernel, apply available security updates immediately. Reboot the system after updating to ensure the patched kernel is active.

Hi! I’m here to help you understand CVE-2026-100078. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70