CVE-2026-93063

CVE-2026-93063

High · published September 17, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mei: check SAP message length before reading it

Verify the SAP message size is not larger than the local buffer before

reading the message to avoid buffer overflow.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Published
2026-09-17T21:18Z
References (6)
https://git.kernel.org/stable/c/242125bbf19a2974d22f3d5025c9c14c0a4aea58 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7d8cc301bcba233f31b589a45f4c1c97f2bb90d6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9c6bea89a16815688a5240dd4a74c922a92fcdc3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a4034f1cc8a422cefc519290d8e6cfb7ff773586 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b90ebae632318dc2e5cd4ac96e454ec50f705579 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7f770d12e6e928006f89a59291074e5fea82886 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:10Z
    wifi: iwlwifi: mei: check SAP message length before reading it
    cvelistv5