Strix
73.2K

CVE-2026-98830

UnknownEPSS 0.20%

Last modified

CVE-2026-98830 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A firmware response with a length field larger than expected overruns the caller buffer and reads past the end of the reply allocation. Replace the dead -ENOMEM check with an active validation that reply->length fits within val_len before the memcpy.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A firmware response with a length field larger than expected overruns the caller buffer and reads past the end of the reply allocation. Replace the dead -ENOMEM check with an active validation that reply->length fits within val_len before the memcpy.

Metrics

EPSS Probability
0.20%

9.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f95a29d40782f4f0052a692a822de3ba044b19ff, < b8310b55e53622a393d14af4939f620c1828778b; >= f95a29d40782f4f0052a692a822de3ba044b19ff, < 819d4c1323e2a9b7329021d5367aa01add22b5dc; >= f95a29d40782f4f0052a692a822de3ba044b19ff, < 02886c18a340da59df57365f29009e1258bfe333; >= f95a29d40782f4f0052a692a822de3ba044b19ff, < 71d140099165de03128c00dd129f1eab21c6a3c4; >= f95a29d40782f4f0052a692a822de3ba044b19ff, < 7acb36fd60a3e7b858f12e69a919c3609b281408; >= f95a29d40782f4f0052a692a822de3ba044b19ff, < ce67ebe9d8629776ce38e6995ae72fb903c828db
LinuxLinux5.5

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98830?
In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A firmware response with a length field larger than expected overruns the caller buffer and reads past the end of the reply allocation. Replace the dead -ENOMEM check with an active validation that reply->length fits within val_len before the memcpy.
How severe is CVE-2026-98830?
Severity scoring for CVE-2026-98830 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98830?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98830?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST