CVE-2026-93790

8.8 HIGH

Published 2026-09-24 · Updated 2026-09-25

AI risk analysis

Summary: The vulnerability allows out-of-bounds access to tid_data in the iwlwifi driver, potentially leading to data corruption or exploitation.
Exploitability: Exploitation is moderately difficult as it requires precise control over the TFD loop counter 'i' and the TID value 'tid'.
Blast radius: If exploited, the impact could be high, potentially leading to system instability or privilege escalation.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the fixed version 6.3.191 or later.

kernelwifiout-of-boundsdata-corruption

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lq_color into a random tid_data slot unrelated to the BA entry. Since multi-TID blockack is not really in use, 'i' was always 0 and no harm was done. Add a out-of-bound check before accessing the array.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.