Strix
74.7K

CVE-2026-93789

UnknownEPSS 0.17%

Last modified

CVE-2026-93789 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.

Metrics

EPSS Probability
0.17%

5.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < 61da42fdd21d98ccb8f1ec5224659f3d09202cf4; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < 8c332d45b736d41301b7e07f322785d821265dbc; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < ce709fcab5e1d4df6d4ba980736dc5908502a40f; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < 4cfadb2e01566bc36d42922fbe18838345087050; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < 528fa9eb14c209533ca26958b76da55e0ce239d8; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < 7aa9097623afb694bc25382a62e14d8e82bf002f; >= dd7a2509b3a79b290730a9c6a784bf03fedabb9a, < acad742714bdc70e7fd7f234323807c596828213
LinuxLinux2.6.35

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93789?
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.
How severe is CVE-2026-93789?
Severity scoring for CVE-2026-93789 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-93789?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93789?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST