CVE-2026-98193EPSS p6.5%
CVE-2026-98193CVE-2026-98193
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject TKIP frames without a full MIC
libipw_michael_mic_verify() assumes that an skb contains an eight-byte
Michael MIC. A short TKIP frame makes the unsigned payload length wrap,
causing michael_mic() to read past the skb.
Check that the MIC is present before verifying it, and use the existing
MICHAEL_MIC_LEN constant for all MIC lengths in the verifier.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 6.5% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-06 |