CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: fix OOB access from firmware tx status queue ID
athtxedmatasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9KNUMTXQUEUES (10) entries. A qid >= 10 causes an OOB array access.
Add a bounds check on ts.qid before using it as an array index.
Event History
Aug 15, 2026
CVE Published
via MITRE·05:59 AM
Data Sourced
via MITRE·05:59 AM
Description