PT-2026-121859
CVE-2026-98889
·
تاريخ النشر
2026-10-23
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: fix sched scan IE sizing
Scheduled scan built the probe request before iwl mvm scan fits(),
so oversized IEs could be copied into the fixed preq buffer before
length validation. Move iwl mvm build scan probe() after the fits
check.
Also advertise max sched scan ie len using iwl mvm max scan ie len()
so userspace limits account for driver-inserted DS/TPC bytes.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾