CVE-2026-97500

CVE-2026-97500

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: phy: check length before parsing PHY status IE

Hardware might report PHY status IE with unexpected length, and parser

might access out of range. Check the length ahead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2026-09-24T21:17Z
References (4)
https://git.kernel.org/stable/c/213f9e0ab2b4f35fe8d342333238c6cc91513fbf · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/72bf6944e336d6f046f5c886ebededdd6560a693 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/884495c39de1a02f42bd40051b921e2311d6ac91 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/98e5720afd7495eece580238f232e3b3b4c022da · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:04Z
    wifi: rtw89: phy: check length before parsing PHY status IE
    cvelistv5