wifi: ath9k: reject short WMI command responses

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-98828
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-10-18 16:17:37 UTC
Updated2026-10-19 10:19:46 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that expectation can therefore be read beyond the skb payload. Record -EMSGSIZE for a short response, complete the waiter, and return the stored status from the command path. This also prevents callers from consuming stale response bytes as a successful reply.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected fb9987d0f748c983bb795a86f47522313f701a08 03ef61d05aa26022327f971b790f07e6bf6e35d6 git Not specified
CNA Linux Linux affected fb9987d0f748c983bb795a86f47522313f701a08 e0c21130c1c7791ba73b19a3a9ea767c8cd43745 git Not specified
CNA Linux Linux affected fb9987d0f748c983bb795a86f47522313f701a08 a3b0137c855a61371d9cf9993b8bcc33c9798202 git Not specified
CNA Linux Linux affected fb9987d0f748c983bb795a86f47522313f701a08 93ce8ea70451e800601bc9444aa33043de15d67b git Not specified
CNA Linux Linux affected 2.6.35 Not specified
CNA Linux Linux unaffected 2.6.35 semver Not specified
CNA Linux Linux unaffected 6.12.113 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.56 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.10 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/a3b0137c855a61371d9cf9993b8bcc33c9798202 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/03ef61d05aa26022327f971b790f07e6bf6e35d6 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/93ce8ea70451e800601bc9444aa33043de15d67b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/e0c21130c1c7791ba73b19a3a9ea767c8cd43745 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report