CVE-2026-93064

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser

iwl_mvm_frob_txf_key_iter() tracks the last matched byte position

in loop variable 'i'. When a full key match is found (match ==

keylen), 'i' points at the last byte of the matched key. The

memset start offset should therefore be i + 1 - keylen, not

i - keylen; the current code zeroes one byte before the match

and leaves the final key byte un-sanitised.