CVE-2026-92498
wifi: ath6kl: avoid buffer overreads in WMI event handlers
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
INFO
Published Date :
Sept. 17, 2026, 5:17 p.m.
Last Modified :
Sept. 17, 2026, 5:17 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Apply provided kernel patches.
- Update the Linux kernel.
- Verify WMI event handler buffer sizes.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-92498.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-92498 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-92498
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-92498 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-92498 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 17, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/92xxx/CVE-2026-92498.json">CVE-2026-92498</a> Added Reference https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0 Added Reference https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc Added Reference https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606 Added Reference https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b Added Reference https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa Added Reference https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d Added Reference https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe Added Reference https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be