Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-92497 Details

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() Currently, in ath12k_wmi_op_rx(), the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread. Update the logic to verify the buffer contains at least enough data to hold a wmi_cmd_hdr before reading from the buffer. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/07659388110de004cbb753f3c7bc85e657e51f7a	kernel.org
https://git.kernel.org/stable/c/7698656a2f7b045af5a6859766238cefea1b1945	kernel.org
https://git.kernel.org/stable/c/95d1bd1db9e9d8eccffc880166e01c4775115716	kernel.org
https://git.kernel.org/stable/c/9784faa6afd26693287e8e4569bdedee00212909	kernel.org
https://git.kernel.org/stable/c/9e6ec0977f0b9c16fc20efea050e3eea8f66e34b	kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes