CVE-2026-74340
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware-controlled rsp->count field is used as the loop bound for indexing into the flexible rsp->regs[] array without validation against the message length. A count exceeding the actual data causes out-of- bounds reads from the heap-allocated message buffer. Add a check that count fits within the received message.
SeverityHigh
CVSS8.1
Exploit probability36. percentile0.4%
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux22b0b8572a64362531dd0ed499b75e16282aeb2b, 3cf92b44c4fb88a5e8de8733a4494c0956606bca, 0907c06dccae9e3c8d5a68eb9014beec73a36e79, 64228dfc4247aca178c01e5a37af7d8dcc7a6089, 23d210877968657bd07e1a517e0b516db20a1d80, f03782f7f41f2afee5076a1ef08ced5649218771, f987efff29a5fe45320ea5991c9d5cb98b676953, df2187acfca6c6cca372c5d35f42394d9c270b09 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < 22b0b8572a64362531dd0ed499b75e16282aeb2b, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < 3cf92b44c4fb88a5e8de8733a4494c0956606bca, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < 0907c06dccae9e3c8d5a68eb9014beec73a36e79, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < 64228dfc4247aca178c01e5a37af7d8dcc7a6089, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < 23d210877968657bd07e1a517e0b516db20a1d80, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < f03782f7f41f2afee5076a1ef08ced5649218771, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < f987efff29a5fe45320ea5991c9d5cb98b676953, 43efa3c0f241e04862be8e6a68ff765d36cde1ba ≤ v < df2187acfca6c6cca372c5d35f42394d9c270b09, 4.11 | 22b0b8572a64362531dd0ed499b75e16282aeb2b, 3cf92b44c4fb88a5e8de8733a4494c0956606bca, 0907c06dccae9e3c8d5a68eb9014beec73a36e79, 64228dfc4247aca178c01e5a37af7d8dcc7a6089, 23d210877968657bd07e1a517e0b516db20a1d80, f03782f7f41f2afee5076a1ef08ced5649218771, f987efff29a5fe45320ea5991c9d5cb98b676953, df2187acfca6c6cca372c5d35f42394d9c270b09 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.