Heap Out-of-Bounds Write Vulnerability in Linux Kernel Wifi RSI

CVE-2026-98407

What is CVE-2026-98407?

The Linux kernel presents a vulnerability in the wifi driver for RSI that allows for a heap out-of-bounds write during key removal operations. Specifically, when a key is set to NULL, the function rsi_hal_load_key() incorrectly processes an offset, leading to memory corruption beyond the intended buffer size. This flaw can be triggered during various network operations, including disconnects and interface teardowns, causing potential instability in affected systems. An unnecessary zeroing of memory in an already allocated buffer exacerbates the issue. Security patches have been proposed to mitigate the risk associated with this vulnerability.

References