Linux Kernel Vulnerability in WiFi Management by rtw89 Vendor

CVE-2026-93281

What is CVE-2026-93281?

A vulnerability within the Linux kernel affects the WiFi management capabilities via the rtw89 driver. The function responsible for checking HE (High Efficiency) extended capabilities erroneously accepts data lengths below 11 bytes for processing, leading to potential instability in WiFi operations. This glitch occurs in the 'rtw89_mac_check_he_obss_narrow_bw_ru_iter()' function, where data truncation or mishandling could disrupt device connectivity and performance. The identified flaw requires rectification to ensure that relevant data is not read unless it meets the minimum length requirements, thus safeguarding against possible exploitation and enhancing overall system reliability.

References