CVE-2026-93807
Received Received - Intake

BaseFortify

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsi_hal_load_key() copies tx_mic_key and rx_mic_key from data[16] and data[24] whenever key data is present. Those offsets are only part of the 32-byte TKIP key layout. Shorter keys used by other ciphers, such as CCMP, do not provide those bytes, so the unconditional copies can read past the supplied key buffer. Only copy the MIC keys for TKIP, and reject malformed TKIP keys that are shorter than the expected 32-byte layout. [drop useless length check]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93807
EUVD
EUVD-2026-86194

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
rsi wifi *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of encryption keys in the RSI WiFi driver. The function rsi_hal_load_key() incorrectly copies MIC keys from fixed offsets in the key buffer, which are only valid for TKIP cipher keys. For other ciphers like CCMP, which use shorter keys, this causes the function to read past the end of the provided key buffer, leading to potential memory corruption or crashes.

Detection Guidance

This vulnerability affects the Linux kernel's wifi driver for RSI devices. Detection requires checking kernel logs for related errors or examining the driver code for improper key buffer handling. Commands like dmesg | grep rsi or journalctl -k | grep rsi may help identify issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or unexpected behavior in systems using the RSI WiFi driver. It may also enable denial-of-service attacks or unauthorized memory access, potentially compromising system security. Users relying on WiFi connectivity with affected systems are most at risk.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Avoid using vulnerable RSI wifi drivers or recompile the kernel with the patched driver. Monitor system logs for unusual activity related to wifi operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93807. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart