Buffer Overflow Vulnerability in Linux Kernel Wi-Fi Firmware Validation

CVE-2026-98830

What is CVE-2026-98830?

A buffer overflow vulnerability exists in the Wi-Fi firmware of the Linux kernel that can occur when the function wfx_hif_read_mib() attempts to copy data from a firmware response into a user-provided buffer. The vulnerability arises from the lack of validation on the length of the response data, which may exceed the allocated size of the buffer. This flaw could lead to reads beyond the buffer's bounds, potentially allowing an attacker to exploit this condition and execute arbitrary code or cause crashes.

References