CVE-2026-74409
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac_id in link lookup The mac_id field in RX descriptors is 8 bits wide (0-255), but assoc_link_on_macid[] has only RTW89_MAX_MAC_ID_NUM (128) entries. While the driver currently assigns mac_id values below 128, the descriptor value comes from firmware and is not validated before use as an array index. Add a defensive bounds check in rtw89_assoc_link_rcu_dereference() to guard against out-of-range firmware values.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxad445de67359f24088d4305c05fbd7e34c4e35e3, 920101305e7601a33b9e01019f4ca526af2526ae, 6d88244bb129755acca696f9227200f4a2d106a6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 144c6cd24b3556e6e7a14271cee57a42ebf97450 ≤ v < ad445de67359f24088d4305c05fbd7e34c4e35e3, 144c6cd24b3556e6e7a14271cee57a42ebf97450 ≤ v < 920101305e7601a33b9e01019f4ca526af2526ae, 144c6cd24b3556e6e7a14271cee57a42ebf97450 ≤ v < 6d88244bb129755acca696f9227200f4a2d106a6, 6.14 | ad445de67359f24088d4305c05fbd7e34c4e35e3, 920101305e7601a33b9e01019f4ca526af2526ae, 6d88244bb129755acca696f9227200f4a2d106a6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.