CVE-2026-93799

CVE-2026-93799

High · published September 24, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: validate sta_id in BA window status notif

BA_WINDOW_STATUS_NOTIFICATION_ID extracts a 5-bit sta_id from the

firmware notification and uses it to index fw_id_to_mac_id[] without

bounds checking. Validate sta_id before array access to prevent

out-of-bounds indexing.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.5th percentile
Published
2026-09-24T21:17Z
References (4)
https://git.kernel.org/stable/c/6aa77efaea9efea92e3090c35ad348fd759a3cf3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bb08fbbbd5568d33069485ecb0a1657f115a4e9f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e35ae757c6462bfd3437bf58121bb721fe1f790c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f9938eb95e2ddab4a58d3946a320abcbd60b56a4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:02Z
    wifi: iwlwifi: mvm: validate sta_id in BA window status notif
    cvelistv5