{"id":"CVE-2026-93281","revision":"1ef1723a9f674a5c9a2cc3cdfe0e9633","records":[{"revision":"1ef1723a9f674a5c9a2cc3cdfe0e9633","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93281","aliases":[],"title":"wifi: rtw89: fix HE extended capability length check","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: fix HE extended capability length check\n\nrtw89_mac_check_he_obss_narrow_bw_ru_iter() reads extended capability\nbyte 10, but rejects only datalen values below 10.  Byte 10 requires at\nleast 11 bytes.\n\nRequire datalen >= 11 before reading data[10].","state":0,"publishedAt":"2026-09-24T15:52:23.24+00:00","modifiedAt":"2026-10-19T09:08:35.587+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/realtek/rtw89/mac.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"eddf53f1edb0cf7f302bd15cdb47cca90948c205\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"655c4401c18d735dbaf2cc172ff4f626b3a896a0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"bddbd1de765bf6ddc0473ad683910eb3a2a92a43\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"f2a01deff7d0d5cc3dcbf2358dac113979303c8e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"f132fc01b359a0f7d81fe13d769ea4e7c4baa66e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d540f9d29162e273797bef36686a010724f0f8a\",\n                            \"lessThan\": \"2aba608a86e9b099c9af2ea70b620552dee2b628\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/realtek/rtw89/mac.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.1\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/eddf53f1edb0cf7f302bd15cdb47cca90948c205","https://git.kernel.org/stable/c/655c4401c18d735dbaf2cc172ff4f626b3a896a0","https://git.kernel.org/stable/c/bddbd1de765bf6ddc0473ad683910eb3a2a92a43","https://git.kernel.org/stable/c/f2a01deff7d0d5cc3dcbf2358dac113979303c8e","https://git.kernel.org/stable/c/f132fc01b359a0f7d81fe13d769ea4e7c4baa66e","https://git.kernel.org/stable/c/2aba608a86e9b099c9af2ea70b620552dee2b628"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93281","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93281","identifiers":["CVE-2026-93281"]},"retained":false,"historicalAffected":[]}],"coverage":[]}