Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
References
- https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0
- https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc
- https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606
- https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b
- https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa
- https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d
- https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe
- https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be
FAQ
What is CVE-2026-92498?
CVE-2026-92498 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer w...
How severe is CVE-2026-92498?
CVSS scoring is not yet available for CVE-2026-92498. Check NVD for updates.
Is there a patch for CVE-2026-92498?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.