CVE-2026-97500

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-24 17:17:27.740000

Last modified

2026-10-30 13:21:05.490000

View original CVE JSON

{
  "id": "CVE-2026-97500",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-24T17:17:27.740",
  "lastModified": "2026-10-30T13:21:05.490",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: phy: check length before parsing PHY status IE\n\nHardware might report PHY status IE with unexpected length, and parser\nmight access out of range. Check the length ahead."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/net/wireless/realtek/rtw89/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd",
              "lessThan": "a8659bacf9a2a4f33690c573f35bb5b11d06bf12",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd",
              "lessThan": "72bf6944e336d6f046f5c886ebededdd6560a693",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd",
              "lessThan": "213f9e0ab2b4f35fe8d342333238c6cc91513fbf",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd",
              "lessThan": "98e5720afd7495eece580238f232e3b3b4c022da",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd",
              "lessThan": "884495c39de1a02f42bd40051b921e2311d6ac91",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/net/wireless/realtek/rtw89/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "5.16",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "5.16",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.158",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.111",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.53",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/213f9e0ab2b4f35fe8d342333238c6cc91513fbf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/72bf6944e336d6f046f5c886ebededdd6560a693",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/884495c39de1a02f42bd40051b921e2311d6ac91",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/98e5720afd7495eece580238f232e3b3b4c022da",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a8659bacf9a2a4f33690c573f35bb5b11d06bf12",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}