CVE-2026-99100

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-99100
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99100.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99100
Downstream
Related
Published
2026-10-28T03:55:38Z
Modified
2026-11-06T17:27:22Z
Summary
wifi: p54: validate firmware record lengths
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: p54: validate firmware record lengths

The p54 firmware parser accesses component ID and component version records without checking that their lengths cover the fields being read. A malformed record can therefore make the parser read past the record.

Validate the component ID and component version record lengths before accessing their data. The descriptor record is also checked against the shortest descriptor length found in the supported firmware images.

Reject descriptor values that underflow the RX offset or produce an empty RX range before updating the driver state.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99100.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eff1a59c48e3c6a006eb4fe5f2e405a996f2259d
Fixed
87a9aba92485889d510052e474999a6ec00b888c
Fixed
d5c28994b2c1440480fccd0b6c2ce72c23bb9fff
Fixed
9af312d3607c8f9b5166a19cbf40cee351cc3a1d
Fixed
dda5245afc3470d70406764e3d9f5508e534920a
Fixed
f4c6fcc2ad462ffd76d6e6f909bcd6ae0391f5b7
Fixed
f641066b0ddcd1b0cf007c0d04f9c966f6e888ae
Fixed
8c4f962f368d5e17481f3c2c5a43028953e137a5
Fixed
db7b86bd97b380ece8fa39cfdd7502a9fd35e56f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99100.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.24
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.161
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.115
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.59
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.13

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99100.json"