CVE-2026-74408
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9K_NUM_TX_QUEUES (10) entries. A qid >= 10 causes an OOB array access. Add a bounds check on ts.qid before using it as an array index.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxfb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54, 734db72d55ca578a344dfa33e30145032c074b25, f5931d06b45ed402572bfe5832fff15864ef5481, 46ca1451f61b598f45cb5259e066d305444d95fc, a9e055ac62cb3fcea262d4b687ec73eed82b3379, 5435fd3edcb11c7cc4002847c83e9a50b49284dc, 336d4c8cd9b1646060ee690c881d465dfc09c6c0, 7ce2f118a2389e8f0a64068c6fe7cc7d40639be0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < fb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < 734db72d55ca578a344dfa33e30145032c074b25, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < f5931d06b45ed402572bfe5832fff15864ef5481, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < 46ca1451f61b598f45cb5259e066d305444d95fc, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < a9e055ac62cb3fcea262d4b687ec73eed82b3379, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < 5435fd3edcb11c7cc4002847c83e9a50b49284dc, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < 336d4c8cd9b1646060ee690c881d465dfc09c6c0, fce041beb03f93c7a771f0b4b6c45bb71ef90901 ≤ v < 7ce2f118a2389e8f0a64068c6fe7cc7d40639be0, 3.1 | fb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54, 734db72d55ca578a344dfa33e30145032c074b25, f5931d06b45ed402572bfe5832fff15864ef5481, 46ca1451f61b598f45cb5259e066d305444d95fc, a9e055ac62cb3fcea262d4b687ec73eed82b3379, 5435fd3edcb11c7cc4002847c83e9a50b49284dc, 336d4c8cd9b1646060ee690c881d465dfc09c6c0, 7ce2f118a2389e8f0a64068c6fe7cc7d40639be0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.