SB2026092580 - Reliance on undefined behavior in Linux kernel iwlwifi fw driver

Description

This security bulletin contains information about 1 vulnerability.

1) Reliance on undefined behavior (CVE-ID: CVE-2026-93788)

CWE-ID: CWE-758 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

CVSSv4: 0 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows an attacker with physical access to trigger undefined behavior.

The vulnerability exists due to improper bounds checking in the WGDS table revision index handling when processing WGDS tables reporting an invalid revision value. An attacker with physical access can cause the kernel to process a WGDS table with an invalid revision value to trigger undefined behavior.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7
• https://git.kernel.org/stable/c/346a558491241cbe8fef82b3d8f62d1a6b6bf61f
• https://git.kernel.org/stable/c/954e821f42aaca56073ca830c5fd4bcf1a89048c