CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: fix 22000 series SMEM parsing
If the firmware were to report three LMACs (which doesn't exist in hardware) then using "fwrt->smemcfg.lmac[2]" is an overrun of the array. Reject such and use IWLFWCHECK instead of WARNON in this function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43172?
The severity of CVE-2026-43172 is categorized as high due to the potential for memory overrun.
How do I fix CVE-2026-43172?
To fix CVE-2026-43172, update the Intel iwlwifi driver to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-43172?
The impact of CVE-2026-43172 includes the possibility of system crashes or exploitation due to memory corruption.
Which software is affected by CVE-2026-43172?
CVE-2026-43172 affects the Intel iwlwifi Linux kernel driver.
Is there a workaround for CVE-2026-43172?
Currently, there is no known workaround for CVE-2026-43172 other than applying the software patch.