CVE-2026-93791: Linux kernel · wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 03084a2c61838ce6a12f082025cbf9ed869f0492 : update Linux kernel when convenient.
Data as of 30 Oct 2026, 13:04 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
Thin evidence
One scorer or none- Patch
- Available – fixed in 03084a2c61838ce6a12f082025cbf9ed869f0492, 59f64c2839022f41a7867b38f9e38c185ff39283, 0f690fd3b5535d110898b99ae6214f29c9060941 +2
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
The vulnerability has been fixed in the Linux kernel. Users should update to a kernel version that includes the fix identified by the commits listed in establishedFacts.fixedVersions. No additional mitigation is required beyond applying the official patch.
Description
A vulnerability in the Linux kernel's iwlwifi driver was addressed by adding a bounds check on the TID value received from firmware. The flaw involved using a firmware-controlled TID value as an array index without validation, which could lead to out-of-bounds access.
References
- git.kernel.org/stable/c/03084a2c61838ce6a12f082025cbf9ed869f0492 (opens in a new tab)
- git.kernel.org/stable/c/0f690fd3b5535d110898b99ae6214f29c9060941 (opens in a new tab)
- git.kernel.org/stable/c/0b5325a0771674f1d65618de7db3df9d49186a12 (opens in a new tab)
- git.kernel.org/stable/c/59f64c2839022f41a7867b38f9e38c185ff39283 (opens in a new tab)
- git.kernel.org/stable/c/0e4c0d83267261cf67ec9690856edf4a56bb7dfc (opens in a new tab)