CVE-2026-93789

None

CVSS

—

EPSS

0.2%

Published

Sep 24, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.

Affected packages

Ecosystem	Package	Introduced	Fixed