CVE-2026-98828
Received Received - Intake

ath9k WMI Command Response Length Validation Flaw

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that expectation can therefore be read beyond the skb payload. Record -EMSGSIZE for a short response, complete the waiter, and return the stored status from the command path. This also prevents callers from consuming stale response bytes as a successful reply.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98828
EUVD
EUVD-2026-103768

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08
Linux Linux 2.6.35

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's ath9k WiFi driver allows a device to send a short response to a WMI command. The system expects a certain number of bytes but receives fewer, causing it to read beyond the actual data. This can lead to memory corruption or incorrect processing of the response.

Detection Guidance

This vulnerability affects the ath9k WiFi driver in the Linux kernel. Detection requires checking kernel logs for related errors or examining the ath9k module for unusual behavior. Commands like dmesg | grep ath9k or journalctl -k | grep ath9k may help identify issues.

Impact Analysis

If exploited, this flaw could allow an attacker to cause system instability, crashes, or unauthorized memory access on a device using the ath9k WiFi driver. It may also enable further attacks by manipulating memory or response handling.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this ath9k vulnerability. If immediate patching is not possible, consider disabling the ath9k driver if WiFi functionality is not critical.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98828. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart