CVE-2026-93791EPSS p5.5%
CVE-2026-93791CVE-2026-93791
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
ba_notif->tid is a firmware-controlled u8 that is used directly
as an array index into tid_data[] without any validation. Add a
bounds check against IWL_MAX_TID_COUNT before dereferencing the
array.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 5.5% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |