Strix
63.5K

CVE-2026-93149

Unknown

Last modified

CVE-2026-93149 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: avoid NULL skb in stop queue drain mac80211_hwsim_stop() drops any frames left in data->pending. The loop currently checks skb_queue_empty() and then dequeues separately. That split is racy with TX status handling, which can remove a pending frame under the queue lock.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: avoid NULL skb in stop queue drain mac80211_hwsim_stop() drops any frames left in data->pending. The loop currently checks skb_queue_empty() and then dequeues separately. That split is racy with TX status handling, which can remove a pending frame under the queue lock. If the last entry is removed after the empty check, skb_dequeue() returns NULL and the stop path passes that NULL skb to ieee80211_free_txskb(). Use skb_dequeue() as the loop condition instead. The dequeue result is the object that stop owns and frees, and a concurrent status completion that empties the queue simply makes the loop terminate.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= bd18de517923903a177508fc8813f44e717b1c00, < d131027054a8dd922dda01fe8d381abe5af4970b; >= bd18de517923903a177508fc8813f44e717b1c00, < c40ba47f2ba1951cb32ea048667ed014d36a5749; >= bd18de517923903a177508fc8813f44e717b1c00, < 2817431a61557f46dc63077b7cc126bc906c242e; >= bd18de517923903a177508fc8813f44e717b1c00, < e7fccad2c8e6ef6bbafe509c95869d161d0f466b; >= bd18de517923903a177508fc8813f44e717b1c00, < 1c2a4ab6efa26415dd131b8c222e7893fda03435; >= bd18de517923903a177508fc8813f44e717b1c00, < 158438cd6ad69d6dd7d871582c38baf22169fede; 78bf3c6131488b00386acd9aff1ea4e6c44fa38e; a9028333001f793b2724e8be42fce3336de2cf1c; 7019c9f385b264a2d6f685028268422d55087e37; >= 5.4.129, < 5.5; >= 5.10.47, < 5.11; >= 5.12.14, < 5.13
LinuxLinux5.13

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93149?
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: avoid NULL skb in stop queue drain mac80211_hwsim_stop() drops any frames left in data->pending. The loop currently checks skb_queue_empty() and then dequeues separately. That split is racy with TX status handling, which can remove a pending frame under the queue lock. If the last entry is removed after the empty check, skb_dequeue() returns NULL and the stop path passes that NULL skb to ieee80211_free_txskb(). Use skb_dequeue() as the loop condition instead. The dequeue result is the object that stop owns and frees, and a concurrent status completion that empties the queue simply makes the loop terminate.
How severe is CVE-2026-93149?
Severity scoring for CVE-2026-93149 is pending analysis.
How do I fix CVE-2026-93149?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93149?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST