CVE-2026-74408

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74408
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74408.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74408
Downstream
Published
2026-08-15T05:59:16.701Z
Modified
2026-08-16T03:48:35.064716684Z
Summary
wifi: ath9k: fix OOB access from firmware tx status queue ID
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath9k: fix OOB access from firmware tx status queue ID

athtxedmatasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9KNUMTXQUEUES (10) entries. A qid >= 10 causes an OOB array access.

Add a bounds check on ts.qid before using it as an array index.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74408.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fce041beb03f93c7a771f0b4b6c45bb71ef90901
Fixed
fb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54
Fixed
734db72d55ca578a344dfa33e30145032c074b25
Fixed
f5931d06b45ed402572bfe5832fff15864ef5481
Fixed
46ca1451f61b598f45cb5259e066d305444d95fc
Fixed
a9e055ac62cb3fcea262d4b687ec73eed82b3379
Fixed
5435fd3edcb11c7cc4002847c83e9a50b49284dc
Fixed
336d4c8cd9b1646060ee690c881d465dfc09c6c0
Fixed
7ce2f118a2389e8f0a64068c6fe7cc7d40639be0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74408.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.1.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74408.json"