CVE-2026-93799
Received Received - Intake

WiFi BA Window Status Notification Sta_ID Validation Flaw in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate sta_id in BA window status notif BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from the firmware notification and uses it to index fw_id_to_mac_id[] without bounds checking. Validate sta_id before array access to prevent out-of-bounds indexing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93799
EUVD
EUVD-2026-86186

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's iwlwifi driver for Intel Wi-Fi devices. It involves a missing validation check on a station ID (sta_id) extracted from a firmware notification. The sta_id is used to access an array without bounds checking, which could allow out-of-bounds memory access if the sta_id is invalid.

Detection Guidance

This vulnerability involves out-of-bounds indexing in the iwlwifi driver. Detection requires checking for kernel logs or firmware crashes related to wireless driver errors. Monitor logs with 'dmesg | grep iwlwifi' or 'journalctl -k | grep iwlwifi' for abnormal sta_id errors.

Impact Analysis

This vulnerability could allow an attacker with access to the system to cause a denial-of-service condition or potentially execute arbitrary code with kernel privileges. It may lead to system crashes or instability, especially if the invalid sta_id triggers memory corruption.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. If immediate patching is not possible, disable the affected wireless driver module temporarily with 'modprobe -r iwlwifi' until an update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93799. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart