CVE-2026-93806

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cfg80211 rx assoc resp() function where the status and response-IE fields of cfg80211 connect resp params are initialized from the management frame before verifying if the frame length is sufficient for those offsets. This occurs in both regular and S1G association responses, where the S1G path fails to prevent the unsafe initialization before patching the resp ie field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.