CVE-2026-97500

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 24, 2026
First seenSep 24, 2026

How to fix

Update
  • Linux Linuxa8659bacf9a2a4f33690c573f35bb5b11d06bf12, 72bf6944e336d6f046f5c886ebededdd6560a693, 213f9e0ab2b4f35fe8d342333238c6cc91513fbf, 98e5720afd7495eece580238f232e3b3b4c022da, 884495c39de1a02f42bd40051b921e2311d6ac91 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxe3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd ≤ v < a8659bacf9a2a4f33690c573f35bb5b11d06bf12, e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd ≤ v < 72bf6944e336d6f046f5c886ebededdd6560a693, e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd ≤ v < 213f9e0ab2b4f35fe8d342333238c6cc91513fbf, e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd ≤ v < 98e5720afd7495eece580238f232e3b3b4c022da, e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd ≤ v < 884495c39de1a02f42bd40051b921e2311d6ac91, 5.16a8659bacf9a2a4f33690c573f35bb5b11d06bf12, 72bf6944e336d6f046f5c886ebededdd6560a693, 213f9e0ab2b4f35fe8d342333238c6cc91513fbf, 98e5720afd7495eece580238f232e3b3b4c022da, 884495c39de1a02f42bd40051b921e2311d6ac91

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-97500 · Linux · Dark Radar