CVE-2026-93790
Received Received - Intake

Buffer Overflow in Linux Kernel iwlwifi Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lq_color into a random tid_data slot unrelated to the BA entry. Since multi-TID blockack is not really in use, 'i' was always 0 and no harm was done. Add a out-of-bound check before accessing the array.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93790
EUVD
EUVD-2026-86177

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's iwlwifi driver for Intel Wi-Fi devices. It involves an out-of-bounds access in the BlockAck (BA) notification handler where the code incorrectly uses a loop counter instead of the actual Traffic ID (TID) value to index into the tid_data array. This could lead to writing data to an unintended memory location.

Detection Guidance

This vulnerability is specific to the Linux kernel's iwlwifi driver and involves an out-of-bounds access in the tid_data array. Detection requires checking for kernel logs or errors related to the iwlwifi module or wireless driver issues. No direct commands are provided in the context to detect this issue.

Impact Analysis

The impact is likely minimal because multi-TID blockack is not commonly used, so the loop counter was always 0. However, in rare cases, this could cause memory corruption or crashes if the incorrect array index is accessed. It may also allow unauthorized memory access in specific scenarios.

Mitigation Strategies

Update your Linux kernel to the latest patched version where this vulnerability is resolved. Monitor kernel logs for iwlwifi-related errors and ensure your wireless drivers are up to date.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93790. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart