CVE-2026-93789: wifi: iwlwifi: bound aligned TLV advance in FW parser
Published Sep 24, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: bound aligned TLV advance in FW parser
Validate ALIGN(tlvlen, 4) against remaining parser length before consuming bytes from the firmware image.
This avoids length underflow on malformed TLVs.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 24, 2026
CVE Published
via MITRE·04:02 PM
Data Sourced
via MITRE·04:02 PM
Description
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
Which systems are exposed to this issue?
Linux kernel systems using the iwlwifi firmware parser are relevant. The flaw is reached while parsing a firmware image containing TLVs.
2
What input is required to trigger the flaw?
A malformed TLV must have an aligned length that exceeds the bytes remaining in the firmware image parser. Without validation of that aligned length, consuming the TLV can cause a length underflow.