Detections
Analytics

CVE-2026-97500

medium

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

References

https://git.kernel.org/stable/c/98e5720afd7495eece580238f232e3b3b4c022da

https://git.kernel.org/stable/c/884495c39de1a02f42bd40051b921e2311d6ac91

https://git.kernel.org/stable/c/72bf6944e336d6f046f5c886ebededdd6560a693

https://git.kernel.org/stable/c/213f9e0ab2b4f35fe8d342333238c6cc91513fbf

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86098

Details

Source: Mitre, NVD

Published: 2026-09-24

Updated: 2026-10-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00156