CVE-2026-98828
NONE—CVSS v3
—CVSS v2
0.20%
EPSS (exploit probability)
—CWE
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: reject short WMI command responses
ath9k_wmi_rsp_callback() removes the validated WMI header and copies
the number of bytes expected by the waiting command into its response
buffer. A device response shorter than that expectation can therefore
be read beyond the skb payload.
Record -EMSGSIZE for a short response, complete the waiter, and return
the stored status from the command path. This also prevents callers from
consuming stale response bytes as a successful reply.
Affected routers (0)
No routers currently mapped to this CVE in our database.