CVE-2026-93793EPSS p13.6%
CVE-2026-93793CVE-2026-93793
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: validate TX_CMD response layout
TX_CMD parsing uses frame_count to walk status entries and then
read the trailing SCD SSN. Make the minimum-length check follow
that exact runtime layout calculation before parsing the payload.
For new TX API, reject TX_CMD responses with frame_count != 1 and
warn/return in the aggregation handler to document that aggregated
accounting is expected via BA notifications.
Scoring
| CVSS | 8.8 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.24% probability of exploitation · percentile 13.6% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-25 |