CVE-2026-1679: net: eswifi socket send payload length not bounded
The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; oversized sends overflow eswifi->buf, corrupting kernel memory (CWE-120). Exploit requires local code that can call the socket send API; no remote attacker can reach it directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1679?
CVE-2026-1679 has a high severity due to its ability to cause kernel memory corruption via buffer overflow.
How do I fix CVE-2026-1679?
To mitigate CVE-2026-1679, update the eswifi socket offload driver to a version that includes bounds checking for payload lengths.
Who is affected by CVE-2026-1679?
CVE-2026-1679 affects systems utilizing the Linux eswifi socket offload driver.
What are the potential impacts of exploiting CVE-2026-1679?
Exploitation of CVE-2026-1679 can lead to kernel memory corruption, potentially allowing for arbitrary code execution locally.
Is CVE-2026-1679 remotely exploitable?
CVE-2026-1679 requires local code execution, making it not remotely exploitable.