CVE-2026-93281
Received Received - Intake

WiFi HE Extended Capability Length Check Bypass in rtw89

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen >= 11 before reading data[10].

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93281
EUVD
EUVD-2026-86153

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's wifi driver for Realtek RTL8897 chipsets (rtw89). It involves an incorrect length check in the HE (High Efficiency) extended capability handling. The function rtw89_mac_check_he_obss_narrow_bw_ru_iter() reads byte 10 of the extended capability but only validates that the data length is at least 10 bytes. However, byte 10 requires at least 11 bytes of data to be safely accessed.

Detection Guidance

This vulnerability is specific to the Linux kernel's rtw89 WiFi driver and involves a length check issue in HE extended capability handling. Detection requires checking the kernel version and the rtw89 driver implementation. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could allow an attacker within WiFi range to cause a denial of service (system crash) or potentially execute arbitrary code on affected systems. It specifically affects systems using the rtw89 wifi driver in the Linux kernel.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel issue with no documented impact on data protection or privacy controls.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve the vulnerability in the rtw89 WiFi driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93281. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart