CVE-2026-93796

Katalog CVE

CVSS 7.0 · High EPSS 0,12%

Skor CVSS 3.1 7.0 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwl_pcie_tx_init() fails after RX init, nic init unwinds via iwl_pcie_rx_free(). The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touch stale RX state. Set rx_pool, global_table, rxq, and alloc_page to NULL after free to make repeated cleanup and retry paths safe.

Rincian

Terbit di NVD

24 September 2026

Terakhir diubah

25 September 2026

Status NVD

Received

CVSS 3.1

7.0 (High), sumber CNA
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/2c79d7a7b583050c9f58041465cb46fe3483ab5d
• https://git.kernel.org/stable/c/3456c5bcc987aeb182e50e30c9b02be8420e9953
• https://git.kernel.org/stable/c/6ec5bf430cf7466cb412e47f2761594092781fac