CVE-2026-93802

Received Received - Intake

Buffer Overflow in Linux Kernel WiFi Driver

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsi_prepare_beacon() copies the mac80211 beacon frame after FRAME_DESC_SZ into a management skb whose usable tailroom may be smaller than MAX_MGMT_PKT_SIZE after alignment. Validate the beacon length against the actual tailroom before the copy and skb_put(). Leave ownership of the management skb with the caller on error, matching the existing rsi_send_beacon() cleanup path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93802

EUVD

EUVD-2026-86189

Affected Vendors & Products

Vendor	Product	Version / Range
rsi	wifi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a potential buffer overflow in the wifi: rsi driver. The issue occurs in the rsi_prepare_beacon() function, which copies a beacon frame into a management skb without first validating if the frame length fits within the available tailroom. This could lead to memory corruption if the beacon frame is too large.

Detection Guidance

This vulnerability involves a buffer overflow in the Linux kernel's wifi driver (rsi). Detection requires checking if your system uses a vulnerable kernel version. Inspect the kernel version with uname -a. If your kernel is older than the patched version, the system may be vulnerable. No specific commands detect this issue directly, but monitoring kernel logs for crashes or unusual wifi behavior may indicate exploitation.

Impact Analysis

If exploited, this vulnerability could allow an attacker to cause a denial of service or potentially execute arbitrary code on a system running a vulnerable Linux kernel with the rsi wifi driver. This could lead to system crashes or unauthorized access.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a buffer overflow issue in the Linux kernel's wifi driver (rsi) that could lead to denial of service or potential code execution. Compliance impacts would only occur if exploitation led to unauthorized data access or system compromise, which is not specified in the provided context.

Mitigation Strategies

Update your Linux kernel to the latest patched version immediately. This can be done via your distribution's package manager (e.g., apt upgrade, yum update). If updating is not immediately possible, disable the rsi wifi driver by blacklisting it in the kernel modules (add rsi to /etc/modprobe.d/blacklist.conf and reboot). Monitor network traffic for unusual activity as a precaution.

Hi! I’m here to help you understand CVE-2026-93802. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70