PT-2026-28314
CVE-2026-1679
·
Published
2026-03-27
·
Updated
2026-03-28
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
eswifi (affected versions not specified)
Description
The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space. Oversized sends can overflow
eswifi->buf, leading to kernel memory corruption. Exploitation requires local code that can call the socket send API; direct remote access is not possible. The issue involves a lack of bounds checking on the payload length when using the socket send functionality.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾