CVE-2026-22978

wifi: avoid kernel-infoleak from struct iw_point

published January 23, 2026

CVSS
—
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: avoid kernel-infoleak from struct iw_point

struct iw_point has a 32bit hole on 64bit arches.

struct iw_point {

void __user *pointer; /* Pointer to the data (in user space) */

__u16 length; /* number of fields or size in bytes */

__u16 flags; /* Optional params */

};

Make sure to zero the structure to avoid disclosing 32bits of kernel data

to user space.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Published
2026-01-23T15:24Z
EPSS history
Timeline
  • 23 JAN 15:24Z
    wifi: avoid kernel-infoleak from struct iw_point
    cvelistv5