CVE-2026-22978: wifi: avoid kernel-infoleak from struct iw_point
In the Linux kernel, the following vulnerability has been resolved:
wifi: avoid kernel-infoleak from struct iwpoint
struct iwpoint has a 32bit hole on 64bit arches.
struct iwpoint { void user pointer; / Pointer to the data (in user space) / u16 length; / number of fields or size in bytes / u16 flags; / Optional params / };
Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22978?
CVE-2026-22978 has been classified as a medium severity vulnerability due to its potential to expose sensitive kernel information.
How do I fix CVE-2026-22978?
To fix CVE-2026-22978, ensure that you update the Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2026-22978?
CVE-2026-22978 affects the Linux kernel, specifically on systems running 64-bit architectures.
Can CVE-2026-22978 lead to data exposure?
Yes, CVE-2026-22978 can potentially lead to kernel information leakage, exposing sensitive data from the kernel.
Is CVE-2026-22978 a remote or local vulnerability?
CVE-2026-22978 is considered a local vulnerability, requiring local access to exploit.