VULNERABILITY INTELLIGENCE

CVE-2026-93789

EPSS probability0.17%
CISA KEVNot currently listed
Published2026-09-24
Last modified2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.

Primary references