CVE-2026-92498
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-17 17:17:52.147000
Last modified
2026-10-19 09:19:40.053000
View original CVE JSON
{
"id": "CVE-2026-92498",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-17T17:17:52.147",
"lastModified": "2026-10-19T09:19:40.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath6kl: avoid buffer overreads in WMI event handlers\n\nThe following WMI event handlers currently read from the event buffer\nwithout first verifying that the message was large enough to hold the\nexpected event:\nath6kl_wmi_scan_complete_rx()\nath6kl_wmi_addba_req_event_rx()\nath6kl_wmi_delba_req_event_rx()\n\nAdd length checks to prevent overread."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/net/wireless/ath/ath6kl/wmi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "144fe0b0fa8f311ebe29ef16c8239bf6a24addc0",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "a2de3fb4f83a525e95a86a683f0ff105b9b5785b",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "d1d2ac5f5b1609a05c455d0aed12904b0985530d",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "ea2a77682f9f984bc9a45a00b7d1aa198503c2fe",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "41159d392c3adedc093a8d80521037b72350f606",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "abda58f4529d7eebb6ef82e2d266dabc17507faa",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "2f3635213ecf52ff943f01645f895cb39db8f0dc",
"versionType": "git",
"status": "affected"
},
{
"version": "bdcd81707973cf8aa9305337166f8ee842a050d4",
"lessThan": "f57314aade9d74d30f3360ec5ef85a83654748be",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/net/wireless/ath/ath6kl/wmi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.2",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.2",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.270",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.221",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.188",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.157",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.110",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.52",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.6",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}