CVE-2026-74409

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rtw89 wifi driver where the mac id field in RX descriptors, which is 8 bits wide (0-255), is used as an array index for assoc link on macid[] without validation. Since assoc link on macid[] only contains 128 entries, a value provided by the firmware that exceeds this limit can lead to an out-of-bounds access. This is addressed by implementing a bounds check within the rtw89 assoc link rcu dereference() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.