CVE-2026-74409: wifi: rtw89: add bounds check on firmware mac_id in link lookup
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: add bounds check on firmware macid in link lookup
The macid field in RX descriptors is 8 bits wide (0-255), but assoclinkonmacid[] has only RTW89MAXMACIDNUM (128) entries. While the driver currently assigns macid values below 128, the descriptor value comes from firmware and is not validated before use as an array index. Add a defensive bounds check in rtw89assoclinkrcudereference() to guard against out-of-range firmware values.
Event History
Aug 15, 2026
CVE Published
via MITRE·05:59 AM
Data Sourced
via MITRE·05:59 AM
Description