CVE-2026-93799

Received Received - Intake

Wi-Fi Stack Out-of-Bounds Access in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate sta_id in BA window status notif BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from the firmware notification and uses it to index fw_id_to_mac_id[] without bounds checking. Validate sta_id before array access to prevent out-of-bounds indexing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93799

EUVD

EUVD-2026-86186

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's iwlwifi driver for Intel Wi-Fi devices. It involves a missing validation check on a station ID (sta_id) extracted from a firmware notification. The sta_id is used to access an array without bounds checking, which could allow out-of-bounds memory access if the sta_id is invalid.

Detection Guidance

This vulnerability involves out-of-bounds indexing in the iwlwifi driver. Detection requires checking for kernel logs or firmware crashes related to wireless driver errors. Monitor logs with 'dmesg | grep iwlwifi' or 'journalctl -k | grep iwlwifi' for abnormal sta_id errors.

Impact Analysis

This vulnerability could allow an attacker with access to the system to cause a denial-of-service condition or potentially execute arbitrary code with kernel privileges. It may lead to system crashes or instability, especially if the invalid sta_id triggers memory corruption.

Compliance Impact

This vulnerability involves an out-of-bounds indexing issue in the Linux kernel's wifi driver, which could lead to memory corruption or crashes. It does not directly relate to data privacy or security controls required by GDPR or HIPAA, as it is a low-level system integrity issue rather than a data exposure or access control flaw.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. If immediate patching is not possible, disable the affected wireless driver module temporarily with 'modprobe -r iwlwifi' until an update is applied.

Hi! I’m here to help you understand CVE-2026-93799. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70