vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97500

wifi: rtw89: phy: check length before parsing PHY status IE

N/A
Published: September 24, 2026 at 04:04 PM UTC
Updated: October 3, 2026 at 11:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.16 ≤ v < 6.12.1115.16 ≤ v < 6.18.535.16 ≤ v < 6.6.1585.16 ≤ v < 7.25.16e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd
Vendor states this is fixed in 213f9e0ab2b4f35fe8d342333238c6cc91513fbf (fixed)
Vendor states this is fixed in 72bf6944e336d6f046f5c886ebededdd6560a693 (fixed)
Vendor states this is fixed in 884495c39de1a02f42bd40051b921e2311d6ac91 (fixed)
Vendor states this is fixed in 98e5720afd7495eece580238f232e3b3b4c022da (fixed)
Vendor states this is fixed in 5.16 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

Source: cverecord
https://git.kernel.org/stable/c/213f9e0ab2b4f35fe8d342333238c6cc91513fbf
Source: cverecord
https://git.kernel.org/stable/c/98e5720afd7495eece580238f232e3b3b4c022da
Source: cverecord
https://git.kernel.org/stable/c/884495c39de1a02f42bd40051b921e2311d6ac91
Source: cverecord
https://git.kernel.org/stable/c/72bf6944e336d6f046f5c886ebededdd6560a693

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card