What’s Vulnerable › Vulnerabilities

CVE-2026-92498: wifi: ath6kl: avoid buffer overreads in WMI event handlers

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.

Affected products

• Linux kernel: 3.2 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0
• https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc
• https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606
• https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b
• https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa
• https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d
• https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe
• https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be

Get alerted when CVE-2026-92498 or the next vulnerability affects your stack