CVE-2026-93788: wifi: iwlwifi: acpi: validate WGDS table revision index
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: acpi: validate WGDS table revision index
Check tblrev bounds before BIT(tblrev) to avoid undefined shifts when firmware reports an invalid revision value.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Validate that the WGDS table revision index (tbl_rev) is within bounds before using it in BIT(tbl_rev), preventing undefined shifts from invalid firmware revision values.
Event History
Frequently Asked Questions
What condition is required to trigger the issue?
The Wi-Fi firmware must report an invalid WGDS table revision value. The vulnerable code uses that revision as an index in a BIT() operation without first checking that it is within bounds.
Which systems are potentially exposed?
Systems running the Linux kernel iwlwifi driver and processing WGDS ACPI data are potentially affected when their firmware reports an invalid table revision. The provided information does not identify specific kernel versions or hardware models.
What does the fix change?
The fix validates the WGDS table revision index before it is passed to BIT(). This prevents undefined shift behavior caused by an invalid firmware-reported revision value.