CVE-2026-74409
- Source
- https://cve.org/CVERecord?id=CVE-2026-74409
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74409.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-74409
- Downstream
- Published
- 2026-08-15T05:59:17.361Z
- Modified
- 2026-08-16T03:48:35.033984808Z
- Summary
- wifi: rtw89: add bounds check on firmware mac_id in link lookup
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: add bounds check on firmware mac_id in link lookup
The macid field in RX descriptors is 8 bits wide (0-255), but assoclinkonmacid[] has only RTW89MAXMACIDNUM (128) entries. While the driver currently assigns macid values below 128, the descriptor value comes from firmware and is not validated before use as an array index. Add a defensive bounds check in rtw89assoclinkrcu_dereference() to guard against out-of-range firmware values.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74409.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/6d88244bb129755acca696f9227200f4a2d106a6
- https://git.kernel.org/stable/c/920101305e7601a33b9e01019f4ca526af2526ae
- https://git.kernel.org/stable/c/ad445de67359f24088d4305c05fbd7e34c4e35e3
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74409.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-74409
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git