CVE-2026-97500

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-09-24 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Affected Software (6)

VendorProductVersion
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < a8659bacf9a2a4f33690c573f35bb5b11d06bf12
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 72bf6944e336d6f046f5c886ebededdd6560a693
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 213f9e0ab2b4f35fe8d342333238c6cc91513fbf
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 98e5720afd7495eece580238f232e3b3b4c022da
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 884495c39de1a02f42bd40051b921e2311d6ac91
Linux Linux 5.16

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.16%
Raw Score 0.001560
Percentile 4.8%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00156
2026-10-30
0.00156
2026-10-29
0.00156

Intelligence Sources

mitre ref →
nvd ref →