{"id":"CVE-2026-93063","revision":"c7b23b9d95944e038f0ddb62ff60b2bc","records":[{"revision":"c7b23b9d95944e038f0ddb62ff60b2bc","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93063","aliases":[],"title":"wifi: iwlwifi: mei: check SAP message length before reading it","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mei: check SAP message length before reading it\n\nVerify the SAP message size is not larger than the local buffer before\nreading the message to avoid buffer overflow.","state":0,"publishedAt":"2026-09-17T16:10:49.112+00:00","modifiedAt":"2026-10-19T09:04:59.22+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mei/main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"a29e442ee110aafdf7785fac6de44b22d3da43db\",\n                            \"lessThan\": \"a4034f1cc8a422cefc519290d8e6cfb7ff773586\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e\",\n                            \"lessThan\": \"b90ebae632318dc2e5cd4ac96e454ec50f705579\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e\",\n                            \"lessThan\": \"9c6bea89a16815688a5240dd4a74c922a92fcdc3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e\",\n                            \"lessThan\": \"242125bbf19a2974d22f3d5025c9c14c0a4aea58\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e\",\n                            \"lessThan\": \"f7f770d12e6e928006f89a59291074e5fea82886\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e\",\n                            \"lessThan\": \"7d8cc301bcba233f31b589a45f4c1c97f2bb90d6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9f71cebcac2148e68d0d67f113d0f9aabfcc7a2a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.1.2\",\n                            \"lessThan\": \"6.1.188\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.0.16\",\n                            \"lessThan\": \"6.1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mei/main.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/a4034f1cc8a422cefc519290d8e6cfb7ff773586","https://git.kernel.org/stable/c/b90ebae632318dc2e5cd4ac96e454ec50f705579","https://git.kernel.org/stable/c/9c6bea89a16815688a5240dd4a74c922a92fcdc3","https://git.kernel.org/stable/c/242125bbf19a2974d22f3d5025c9c14c0a4aea58","https://git.kernel.org/stable/c/f7f770d12e6e928006f89a59291074e5fea82886","https://git.kernel.org/stable/c/7d8cc301bcba233f31b589a45f4c1c97f2bb90d6"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93063","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93063","identifiers":["CVE-2026-93063"]},"retained":false,"historicalAffected":[]}],"coverage":[]}