CVE-2026-36355: Infoleak
The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the writemem (ioctl 0x89F5) and readmem (ioctl 0x89F6) debug handlers, which are compiled into production builds via the unconditionally defined IOCTLDEBUGCMD macro in 8192cdcfg.h
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify 8192cd_cfg.h so that _IOCTL_DEBUG_CMD_ is not unconditionally defined for production builds, thereby preventing the debug handlers that implement write_mem (ioctl 0x89F5) and read_mem (ioctl 0x89F6) from being compiled into production.
rtl8192cd Wi-Fi kernel driver (Realtek rtl819x Jungle SDK) _IOCTL_DEBUG_CMD_ macro in 8192cd_cfg.h = undef/disable in production builds
Event History
Frequently Asked Questions
What is the severity of CVE-2026-36355?
CVE-2026-36355 has a high severity rating of 7.7 according to CVSS 3.1.
How do I fix CVE-2026-36355?
To mitigate CVE-2026-36355, ensure that you upgrade to a patched version of the Realtek rtl8192cd Wi-Fi kernel driver.
What systems are affected by CVE-2026-36355?
CVE-2026-36355 affects all known versions of the Realtek rtl819x Jungle SDK up to v3.4.14B.
What type of vulnerability is CVE-2026-36355?
CVE-2026-36355 is classified as an information leak vulnerability due to inadequate access control checks.
Is CVE-2026-36355 actively being exploited?
Yes, CVE-2026-36355 is marked as exploited and an exploit was published on May 27, 2026.