https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:39:26 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-98183 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2026-98183 https://cve.radiocsirt.org/vuln/euvd-2026-383294 EUVD-2026-383294 https://cve.radiocsirt.org/vuln/euvd-2026-383294 https://cve.radiocsirt.org/vuln/fkie_cve-2026-98183 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: avoid out-of-bounds read for empty PREQ elements</p> <p>ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload.</p> <p>Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: avoid out-of-bounds read for empty PREQ elements</p> <p>ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload.</p> <p>Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-98183 https://cve.radiocsirt.org/vuln/ghsa-867h-2x92-cj79 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: avoid out-of-bounds read for empty PREQ elements</p> <p>ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload.</p> <p>Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: avoid out-of-bounds read for empty PREQ elements</p> <p>ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload.</p> <p>Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> https://cve.radiocsirt.org/vuln/ghsa-867h-2x92-cj79 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-98183 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 96 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload. Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 96 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements ieee80211_mesh_preq_size_ok() derives the location of the PREQ bottom fields before checking whether the element contains even the fixed header. ieee80211_mesh_hwmp_preq_get_bottom() reads the flags byte to account for the optional Address Extension field. Consequently, an empty PREQ element causes a one-byte read beyond its declared payload. Move the helper call after both size checks, so the bottom fields are only accessed when they are present.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-98183