CVE-2026-98193
- Source
- https://cve.org/CVERecord?id=CVE-2026-98193
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98193.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-98193
- Downstream
- Published
- 2026-10-06T08:44:33Z
- Modified
- 2026-10-07T02:47:32Z
- Summary
- wifi: libipw: reject TKIP frames without a full MIC
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject TKIP frames without a full MIC
libipw_michael_mic_verify() assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the unsigned payload length wrap, causing michael_mic() to read past the skb.
Check that the MIC is present before verifying it, and use the existing MICHAEL_MIC_LEN constant for all MIC lengths in the verifier.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98193.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/06f42accaf3c6aecab1dcc57f68dde6c06c8b380
- https://git.kernel.org/stable/c/9a7fb67364817710c96785ff86b71a2711ee92cb
- https://git.kernel.org/stable/c/ac7c08626f67844336086cf563f417566b76f0d7
- https://git.kernel.org/stable/c/bb7ae8910cc886885aea95abb7c2e578a2341646
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98193.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98193
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb453872c35cfcbdbf5a794737817f7d4e7b1b579Fixed9a7fb67364817710c96785ff86b71a2711ee92cbFixedac7c08626f67844336086cf563f417566b76f0d7Fixedbb7ae8910cc886885aea95abb7c2e578a2341646Fixed06f42accaf3c6aecab1dcc57f68dde6c06c8b380