Threats tagged 'ghsa-4qpj-7mpx-3h2f'

A high-severity vulnerability (CVE-2026-31779) in the Linux kernel's iwlwifi driver could cause a potential out-of-bounds read in the iwl_mvm_nd_match_info_handler() function. This occurs because the memcpy operation assumes the dynamic array notif->matches is sufficiently large, which may lead to reading unintended data. The issue has been fixed by extending validation checks to ensure the packet length is adequate.