CVE-2026-93789

CVE-2026-93789

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: bound aligned TLV advance in FW parser

Validate ALIGN(tlv_len, 4) against remaining parser length before

consuming bytes from the firmware image.

This avoids length underflow on malformed TLVs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.3th percentile
Published
2026-09-24T21:17Z
References (7)
https://git.kernel.org/stable/c/4cfadb2e01566bc36d42922fbe18838345087050 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/528fa9eb14c209533ca26958b76da55e0ce239d8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/61da42fdd21d98ccb8f1ec5224659f3d09202cf4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7aa9097623afb694bc25382a62e14d8e82bf002f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8c332d45b736d41301b7e07f322785d821265dbc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/acad742714bdc70e7fd7f234323807c596828213 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ce709fcab5e1d4df6d4ba980736dc5908502a40f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:02Z
    wifi: iwlwifi: bound aligned TLV advance in FW parser
    cvelistv5