CVE-2026-92498
Published: September 19, 2026Last modified: September 19, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Vulnerable (6.1.182-r0) |
| 25 LTS | linux-lts | Vulnerable (6.12.103-r0) | |
| Stream | linux-lts | Vulnerable (6.18.46-r0) |
References
- https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0
- https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc
- https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606
- https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b
- https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa
- https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d
- https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe
- https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be