CVE-2026-93793

8.8 HIGH

Published 2026-09-24 · Updated 2026-09-25

AI risk analysis

Summary: This vulnerability in the iwlwifi driver for the Linux kernel allows an attacker to exploit misinterpreted TX_CMD responses, leading to potential system instability or security issues.
Exploitability: Exploitation requires specific conditions, such as the presence of certain TX_CMD responses, making it moderately difficult. Precondition is the availability of the affected TX API.
Blast radius: If exploited, the impact could range from system crashes to more severe security breaches, depending on the system's configuration and the attacker's capabilities.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the Linux kernel version 6.1.18 or later.

kernelwirelesstx-cmd

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX_CMD response layout TX_CMD parsing uses frame_count to walk status entries and then read the trailing SCD SSN. Make the minimum-length check follow that exact runtime layout calculation before parsing the payload. For new TX API, reject TX_CMD responses with frame_count != 1 and warn/return in the aggregation handler to document that aggregated accounting is expected via BA notifications.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.