Out-of-Bounds Read Vulnerability in Linux Kernel Affects Multiple Products

CVE-2026-74410

What is CVE-2026-74410?

This vulnerability in the Linux kernel affects the RTW88 wireless driver by allowing an out-of-bounds read due to improperly calculated lengths in packet descriptors. The issue arises when the sum of the packet length and offset exceeds the allowable size of the DMA buffer, risking sensitive data exposure and potential security breaches. While USB transport protocols provide validation checks, the PCIe implementation lacks this layer of security. A patch has been introduced to validate the new length against the DMA buffer limit, mitigating potential exploitation.

References