CVE-2026-93784

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where a malformed Information Element (IE) buffer can be stored via the SIOCSIWGENIE command in the cfg80211 wext siwgenie() function without proper validation. A subsequent SIOCSIWESSID command triggers a connection attempt that calls cfg80211 sme get conn ies() to process the stored buffer, leading to two potential failures: an out-of-bounds read in the skip ie() function when accessing the length byte past the end of the buffer, and an integer underflow in the memcpy size argument when the offset returned by ieee80211 ie split() exceeds the buffer length, causing the value to wrap to SIZE MAX and triggering a fortify panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.