CVE-2026-93793

Received Received - Intake

WiFi TX_CMD Parsing Flaw in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX_CMD response layout TX_CMD parsing uses frame_count to walk status entries and then read the trailing SCD SSN. Make the minimum-length check follow that exact runtime layout calculation before parsing the payload. For new TX API, reject TX_CMD responses with frame_count != 1 and warn/return in the aggregation handler to document that aggregated accounting is expected via BA notifications.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93793

EUVD

EUVD-2026-86180

Affected Vendors & Products

Vendor	Product	Version / Range
intel	iwlwifi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper validation of TX_CMD responses in the iwlwifi driver. The issue occurs when parsing TX_CMD responses, where the frame_count value is used to navigate status entries and read the trailing SCD SSN. The vulnerability arises because the minimum-length check does not align with the runtime layout calculation, potentially leading to incorrect parsing of the payload.

Detection Guidance

This vulnerability affects the Linux kernel's iwlwifi driver for Intel Wi-Fi devices. Detection requires checking kernel logs for related warnings or errors during TX_CMD processing. Monitor logs with commands like dmesg | grep iwlwifi or journalctl -k | grep iwlwifi for unusual TX_CMD response patterns.

Impact Analysis

This vulnerability could allow an attacker to exploit improper parsing of TX_CMD responses, potentially leading to memory corruption, denial of service, or unauthorized access to system resources. It specifically affects systems using Intel iwlwifi wireless drivers.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a specific WiFi driver (iwlwifi) in the Linux kernel. No evidence suggests data exposure or privacy risks that would impact regulatory compliance.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. Monitor vendor advisories for iwlwifi driver updates and apply them promptly.

Hi! I’m here to help you understand CVE-2026-93793. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70