CVE-2026-46092

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash. This has probably been unnoticed as 8821CE is mostly supplied in laptops where there is a PCI-to-PCI bridge located upstream from the device. However the card might be installed on a system with different configuration. Check if the bridge does exist for the specific workaround to be applied. Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool.

Rincian

Terbit di NVD

27 Mei 2026

Terakhir diubah

16 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/eb101d2abdcccb514ca4fccd3b278dd8267374f6 patch
• https://git.kernel.org/stable/c/000134a20bbf89b1152520a2eef71f91fdb83a5b
• https://git.kernel.org/stable/c/3b89b4c095804c478d50376285e66700cf3c045f
• https://git.kernel.org/stable/c/3bbbb56204f7359ce2139a9341b43b52a186261c
• https://git.kernel.org/stable/c/6c53d68e3bcfc8faccdd76c3383a9232b05c9ae6
• https://git.kernel.org/stable/c/959c13da6c36167ce1016d400a6104d2367f686e
• https://git.kernel.org/stable/c/cc9b6303e7ea91bc360b42c7edc1fe9ceb2f47fe