CVE-2026-74410

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the rtw88 wifi driver within the rtw pci rx napi() function. The issue occurs because the new len variable is calculated by summing pkt len and pkt offset, both of which are controlled by the firmware. This sum can exceed the RTK PCI RX BUF SIZE limit, leading to an out-of-bounds read from the pre-allocated DMA (Direct Memory Access) buffer when the skb put data() function copies the data. While the USB transport path includes validation, the PCIe path lacks this check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.