CVE-2026-98193
- Source
- https://cve.org/CVERecord?id=CVE-2026-98193
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98193.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-98193
- Downstream
- Related
- Published
- 2026-10-06T08:44:33Z
- Modified
- 2026-11-01T02:34:50Z
- Summary
- wifi: libipw: reject TKIP frames without a full MIC
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: libipw: reject TKIP frames without a full MIC
libipw_michael_mic_verify() assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the unsigned payload length wrap, causing michael_mic() to read past the skb.
Check that the MIC is present before verifying it, and use the existing MICHAEL_MIC_LEN constant for all MIC lengths in the verifier.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98193.json" }- References
-
- https://git.kernel.org/stable/c/0636970f31dd9099f98578a62335eb534be72e3a
- https://git.kernel.org/stable/c/06f42accaf3c6aecab1dcc57f68dde6c06c8b380
- https://git.kernel.org/stable/c/2e23abdaf6d32aa112efaa474629af7584d3acc6
- https://git.kernel.org/stable/c/9442bf5ea83314ef9a8a33e6885da45a61d1474d
- https://git.kernel.org/stable/c/9a7fb67364817710c96785ff86b71a2711ee92cb
- https://git.kernel.org/stable/c/ac7c08626f67844336086cf563f417566b76f0d7
- https://git.kernel.org/stable/c/bb7ae8910cc886885aea95abb7c2e578a2341646
- https://git.kernel.org/stable/c/f448b267968d0ee985e5927c868c8f858169ab34
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98193.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98193
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb453872c35cfcbdbf5a794737817f7d4e7b1b579Fixed2e23abdaf6d32aa112efaa474629af7584d3acc6Fixed9442bf5ea83314ef9a8a33e6885da45a61d1474dFixed0636970f31dd9099f98578a62335eb534be72e3aFixedf448b267968d0ee985e5927c868c8f858169ab34Fixed9a7fb67364817710c96785ff86b71a2711ee92cbFixedac7c08626f67844336086cf563f417566b76f0d7Fixedbb7ae8910cc886885aea95abb7c2e578a2341646Fixed06f42accaf3c6aecab1dcc57f68dde6c06c8b380
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.6.14Fixed5.10.273
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.224
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.191
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.160
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.112
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.54
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.2.8