Skip to main content
VulnerabilityPublished Updated

CVE-2026-93166: Linux kernel · wifi: rtw89: debug: fix off by on in rtw89_ppdu_str()

Affects Linux kernelSource GCVE Database

0
Authoritative record:CVE-2026-93166

Not known to be exploited.

Data as of 26 Oct 2026, 13:47 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
Ubuntu 24.04 LTSlinux-aws-6.14pkg:deb/ubuntu/linux-aws-6.14?arch=source&distro=nobleOther threatsAffected
  • 6.14.0-1007.7~24.04.1 – 6.14.0-1018.18~24.04.1
11 affected builds
Fixed in–
Ubuntu 24.04 LTSlinux-aws-6.17pkg:deb/ubuntu/linux-aws-6.17?arch=source&distro=nobleOther threatsAffected
  • 6.17.0-1005.5~24.04.2 – 6.17.0-1020.20~24.04.1
10 affected builds
Fixed in–
Ubuntu 24.04 LTSlinux-azure-6.11pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=nobleOther threatsAffected
  • 6.11.0-1008.8~24.04.1 – 6.11.0-1018.18~24.04.1
7 affected builds
Fixed in–
Ubuntu 24.04 LTSlinux-azure-6.14pkg:deb/ubuntu/linux-azure-6.14?arch=source&distro=nobleOther threatsAffected
  • 6.14.0-1010.10~24.04.1 – 6.14.0-1017.17~24.04.1
5 affected builds
Fixed in–
Ubuntu 24.04 LTSlinux-azure-6.17pkg:deb/ubuntu/linux-azure-6.17?arch=source&distro=nobleOther threatsAffected
  • 6.17.0-1008.8~24.04.1 – 6.17.0-1022.22
10 affected builds
Fixed in–
Ubuntu 24.04 LTSlinux-azure-fde-6.14pkg:deb/ubuntu/linux-azure-fde-6.14?arch=source&distro=nobleOther threatsAffected
  • 6.14.0-1012.12~24.04.1 – 6.14.0-1017.17~24.04.1
5 affected builds
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A fix is available that corrects the comparison operator in the rtw89_ppdu_str() function to prevent out-of-bounds access. Users should apply the official kernel updates for the affected linux-hwe-edge versions to remediate this vulnerability.

Description

A vulnerability in the Linux kernel's wifi driver rtw89 was fixed by correcting a comparison operator to prevent out-of-bounds access. The issue involved an incorrect '>' comparison that should have been '>=' in the function rtw89_ppdu_str(). This flaw could potentially lead to memory access errors. The vulnerability affects specific versions of the linux-hwe-edge kernel. The severity is assessed as medium.

References

Community reviews

Loading reviews…