CVE-2026-98187
Last modified
CVE-2026-98187 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST The PDR_INTERFACE_LIST loop only checks that the record start is within the entry before reading an entire struct exp_if from it. A truncated trailing record makes the if_id/variant reads cross the entry boundary into the heap beyond the EEPROM buffer (verified with a KASAN reproducer of the loop).
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST The PDR_INTERFACE_LIST loop only checks that the record start is within the entry before reading an entire struct exp_if from it. A truncated trailing record makes the if_id/variant reads cross the entry boundary into the heap beyond the EEPROM buffer (verified with a KASAN reproducer of the loop). The variant also feeds the synth front-end selection, so this is not only a leak. Advance only while a full record still fits in the entry.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < 162dbe1c285a621eab6a9f2851086b63a0378928; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < 70bf34b425fe549a4f6a8d50a319f8f05d1f91c9; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < 487f966421014de41e835bbce3feb30b35f4f729; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < bc83c04be042f53869c315b8e1eb5f124959d1d7; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < d44c1badc2dcb042985f7e37f4c448c84548b81f; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < d2fb6b588dc5bbab4f603661e41cd60f0d931628; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < d82492fd0a3fb61963c236521852763238ad3898; >= eff1a59c48e3c6a006eb4fe5f2e405a996f2259d, < d8efd84f49379ed28624098821f80e992657d935 |
| Linux | Linux | 2.6.24 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98187?
How severe is CVE-2026-98187?
How do I fix CVE-2026-98187?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98181In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98182In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98183In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98184In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98185In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98186In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98188In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98189In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98190In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98191In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98192In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98193In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98187?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST