CVE-2026-93807
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsi_hal_load_key() copies tx_mic_key and rx_mic_key from data[16] and data[24] whenever key data is present. Those offsets are only part of the 32-byte TKIP key layout. Shorter keys used by other ciphers, such as CCMP, do not provide those bytes, so the unconditional copies can read past the supplied key buffer. Only copy the MIC keys for TKIP, and reject malformed TKIP keys that are shorter than the expected 32-byte layout. [drop useless length check]
Affected versions
Linux kernel versions
3.15
and later are affected. Fixed in
5.10.271,
5.15.222,
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-93807?
CVE-2026-93807 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.15 onward and has been patched in 5.10.271, 5.15.222, 6.1.189 and others. CVE-2026-93807 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-93807?
Yes. CVE-2026-93807 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others. If you are running Linux kernel 3.15 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-93807 actively exploited?
No. CVE-2026-93807 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.