CVE-2026-22978None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
wifi: avoid kernel-infoleak from struct iw_point
struct iw_point has a 32bit hole on 64bit arches.
struct iw_point { void __user pointer; / Pointer to the data (in user space) / __u16 length; / number of fields or size in bytes / __u16 flags; / Optional params */ };
Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.
Linux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < d943b5f592767b107ba8c12a902f17431350378cLinux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < a3827e310b5a73535646ef4a552d53b3c8bf74f6Linux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < 442ceac0393185e9982323f6682a52a53e8462b1Linux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8Linux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < 024f71a57d563fbe162e528c8bf2d27e9cac7c7bLinux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < e3c35177103ead4658b8a62f41e3080d45885464Linux >= 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 < 21cbf883d073abbfe09e3924466aa5e0449e7261Linux 2.6.27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses