CVE-2026-46092 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridge() returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash. This has probably been unnoticed as 8821CE is mostly supplied in laptops where there is a PCI-to-PCI bridge located upstream from the device. However the card might be installed on a system with different configuration. Check if the bridge does exist for the specific workaround to be applied. Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool.
A vulnerability in the Linux kernel's rtw88 WiFi driver can cause a system crash when the 8821CE device is installed on a root bus without a PCI-to-PCI bridge. The issue arises because the probing routine fails to find the necessary bridge, leading to a crash. This vulnerability has likely gone unnoticed, as the 8821CE is typically used in laptops with the appropriate PCI bridge configuration. However, it can be installed on systems with different PCI topologies, where the bridge is absent, causing the probing routine to crash. The vulnerability was identified by the Linux Verification Center using the Svace static analysis tool.
Users can check for the existence of a PCI upstream bridge and apply the specific workaround if needed. The Linux kernel has been patched to address this vulnerability, and the fixed version can be downloaded from the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.15.17, < 5.16 >= 5.16.3, < 7.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | kernel.org |
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |