SB20261007178 - Heap-based buffer overflow in Linux kernel marvell mwifiex driver

Description

This security bulletin contains information about 1 vulnerability.

1) Heap-based buffer overflow (CVE-ID: CVE-2026-98184)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to corrupt heap memory.

The vulnerability exists due to a heap-based buffer overflow caused by authentication frame length truncation in mwifiex_cfg80211_authenticate() when processing authentication requests with oversized authentication data. A local privileged user can supply authentication data that causes the calculated frame length to exceed the capacity of a 16-bit field to corrupt heap memory.

Exploitation requires CAP_NET_ADMIN in the user namespace owning the network namespace, an up station network device, and a suitable BSS/SAE authentication request.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/25c45a2075cc00faed45f92a64bb172fb074a2ee
• https://git.kernel.org/stable/c/5747eaa38a7fcad48be2fd910b65008198b2b06c
• https://git.kernel.org/stable/c/877b61a67d5eb3e616478daf3908114b57feff1e
• https://git.kernel.org/stable/c/fa00193eb991f92b007aefe7afb6a7566976dacf