Out-of-bounds read in Linux kernel - CVE-2026-93797

Vulnerability details

The vulnerability allows a remote attacker to read memory out of bounds.

The vulnerability exists due to an out-of-bounds read in the iwl_mvm_check_he_obss_narrow_bw_ru_iter function when processing an extended capability information element shorter than 11 bytes. A remote attacker can supply a malformed extended capability information element to read memory out of bounds.

Affected software

How to mitigate CVE-2026-93797

External References

• https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5
• https://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9
• https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8

Related Security Bulletins

• Out-of-bounds read in Linux kernel iwlwifi mvm driver