CVE-2026-74340
- Source
- https://cve.org/CVERecord?id=CVE-2026-74340
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74340.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-74340
- Downstream
- Published
- 2026-08-15T05:58:30.558Z
- Modified
- 2026-08-16T03:48:35.034933611Z
- Summary
- wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: wcn36xx: fix OOB read from firmware count in PRINTREGINFO indication
The firmware-controlled rsp->count field is used as the loop bound for indexing into the flexible rsp->regs[] array without validation against the message length. A count exceeding the actual data causes out-of- bounds reads from the heap-allocated message buffer.
Add a check that count fits within the received message.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74340.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/0907c06dccae9e3c8d5a68eb9014beec73a36e79
- https://git.kernel.org/stable/c/22b0b8572a64362531dd0ed499b75e16282aeb2b
- https://git.kernel.org/stable/c/23d210877968657bd07e1a517e0b516db20a1d80
- https://git.kernel.org/stable/c/3cf92b44c4fb88a5e8de8733a4494c0956606bca
- https://git.kernel.org/stable/c/64228dfc4247aca178c01e5a37af7d8dcc7a6089
- https://git.kernel.org/stable/c/df2187acfca6c6cca372c5d35f42394d9c270b09
- https://git.kernel.org/stable/c/f03782f7f41f2afee5076a1ef08ced5649218771
- https://git.kernel.org/stable/c/f987efff29a5fe45320ea5991c9d5cb98b676953
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74340.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-74340
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced43efa3c0f241e04862be8e6a68ff765d36cde1baFixed22b0b8572a64362531dd0ed499b75e16282aeb2bFixed3cf92b44c4fb88a5e8de8733a4494c0956606bcaFixed0907c06dccae9e3c8d5a68eb9014beec73a36e79Fixed64228dfc4247aca178c01e5a37af7d8dcc7a6089Fixed23d210877968657bd07e1a517e0b516db20a1d80Fixedf03782f7f41f2afee5076a1ef08ced5649218771Fixedf987efff29a5fe45320ea5991c9d5cb98b676953Fixeddf2187acfca6c6cca372c5d35f42394d9c270b09
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.11.0Fixed5.10.261
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.212
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.178
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.145
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.97
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.40
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.1.5