CVE-2026-93789

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.

References

• https://git.kernel.org/stable/c/528fa9eb14c209533ca26958b76da55e0ce239d8
• https://git.kernel.org/stable/c/7aa9097623afb694bc25382a62e14d8e82bf002f
• https://git.kernel.org/stable/c/acad742714bdc70e7fd7f234323807c596828213