---
id: CVE-2026-93797
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: iwlwifi: mvm: fix an off-by-1 boundary check

  Before looking at the 11th byte, check the length is big enough.
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: iwlwifi: mvm: fix an off-by-1 boundary check

  Before looking at the 11th byte, check the length is big enough.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    2c8c06c59ed72a42e4d32e222542b582b4911459
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    23d3fddddd2bcedb4fd6cec5bef16b1fbb563019
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    45fcdbae679861b90f08964a0c3e9eead3bacd6f
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    7a2d4efea2c41b49db90907c8b6f37f8b63a9f50
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    1e3b72c9b63288a5f204e2c8f38eae01515d7dc5
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    4d60332387336088e66cc8f1e71e516b6b872ef9
  - >-
    Linux >= 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 <
    d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8
  - Linux 5.4
published: '2026-09-24'
updated: '2026-10-03'
sourceUpdated: '2026-10-03T11:17:49.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93797'
references:
  - url: 'https://git.kernel.org/stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00173
epssPercentile: 0.0664
ingestedAt: '2026-09-24T16:47:15.900Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix an off-by-1 boundary check

Before looking at the 11th byte, check the length is big enough.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.