Parsing Flaw in Linux Kernel Affecting PHY Status Reporting

CVE-2026-97500

What is CVE-2026-97500?

A parsing flaw in the Linux kernel's handling of PHY status Information Elements (IE) has been detected, which may lead to potential security risks. Specifically, hardware can report PHY status with an unexpected length, causing the parser to potentially access memory out of bounds. This issue arises when the length is not adequately verified before parsing the PHY status IE, resulting in an elevated risk of exploitation. Proper validation measures have been introduced to ensure length checks are conducted prior to parsing to mitigate this vulnerability.

References