CVE-2026-92496: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Avoid buffer overread in ath11k_wmi_t
Summary
A vulnerability in the Linux kernel's ath11k WiFi driver allowed buffer overread (reading past the end of allocated memory) when processing firmware data because the code didn't check if enough data existed before reading a header. The fix adds a length check before accessing the header to ensure the buffer has sufficient data.
Solution / Mitigation
Add an upfront length check before dereferencing skb->data (the socket buffer's data pointer) as a wmi_cmd_hdr (WiFi Management Interface command header), placed before the trace_ath11k_wmi_event() call to maintain existing trace behavior.
Vulnerability Details
EPSS: 0.0%
September 17, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-92496
First tracked: September 17, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 95%