CVE-2026-93788

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93788", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-18T17:59:28.788Z", "datePublished": "2026-09-24T16:02:21.751Z", "dateUpdated": "2026-10-03T10:57:23.599Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-03T10:57:23.599Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: acpi: validate WGDS table revision index\n\nCheck tbl_rev bounds before BIT(tbl_rev) to avoid undefined shifts when\nfirmware reports an invalid revision value."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/intel/iwlwifi/fw/acpi.c"], "versions": [{"version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "lessThan": "4f2ec7a0b3ff148cb13e14cb26ac43523df8b9f5", "status": "affected", "versionType": "git"}, {"version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "lessThan": "9096509e63ddd349eb075ec447d1a714e87e17a4", "status": "affected", "versionType": "git"}, {"version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "lessThan": "2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7", "status": "affected", "versionType": "git"}, {"version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "lessThan": "346a558491241cbe8fef82b3d8f62d1a6b6bf61f", "status": "affected", "versionType": "git"}, {"version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "lessThan": "954e821f42aaca56073ca830c5fd4bcf1a89048c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/intel/iwlwifi/fw/acpi.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4f2ec7a0b3ff148cb13e14cb26ac43523df8b9f5"}, {"url": "https://git.kernel.org/stable/c/9096509e63ddd349eb075ec447d1a714e87e17a4"}, {"url": "https://git.kernel.org/stable/c/2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7"}, {"url": "https://git.kernel.org/stable/c/346a558491241cbe8fef82b3d8f62d1a6b6bf61f"}, {"url": "https://git.kernel.org/stable/c/954e821f42aaca56073ca830c5fd4bcf1a89048c"}], "title": "wifi: iwlwifi: acpi: validate WGDS table revision index", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/wireless/intel/iwlwifi/fw/acpi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "4f2ec7a0b3ff148cb13e14cb26ac43523df8b9f5", "status": "affected", "version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "versionType": "git"}, {"lessThan": "9096509e63ddd349eb075ec447d1a714e87e17a4", "status": "affected", "version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "versionType": "git"}, {"lessThan": "2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7", "status": "affected", "version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "versionType": "git"}, {"lessThan": "346a558491241cbe8fef82b3d8f62d1a6b6bf61f", "status": "affected", "version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "versionType": "git"}, {"lessThan": "954e821f42aaca56073ca830c5fd4bcf1a89048c", "status": "affected", "version": "97f8a3d1610b1f50013de1e632b007cbfd7459d8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/wireless/intel/iwlwifi/fw/acpi.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"lessThan": "5.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: acpi: validate WGDS table revision index\n\nCheck tbl_rev bounds before BIT(tbl_rev) to avoid undefined shifts when\nfirmware reports an invalid revision value."}], "id": "CVE-2026-93788", "lastModified": "2026-10-03T11:17:48.457", "metrics": {}, "published": "2026-09-24T17:17:11.477", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/346a558491241cbe8fef82b3d8f62d1a6b6bf61f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4f2ec7a0b3ff148cb13e14cb26ac43523df8b9f5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9096509e63ddd349eb075ec447d1a714e87e17a4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/954e821f42aaca56073ca830c5fd4bcf1a89048c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: iwlwifi: acpi: validate WGDS table revision index", "id": "2540473", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540473"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1335", "details": ["A flaw was found in the Linux kernel's iwlwifi wireless driver. When processing Advanced Configuration and Power Interface (ACPI) data, the driver does not properly validate the revision index of the WiFi Global Dynamic SAR (WGDS) table before performing a bit-shift calculation. An invalid revision value reported by the device firmware can trigger an undefined shift operation, potentially resulting in system instability or a Denial of Service (DoS)."], "name": "CVE-2026-93788", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-93788\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-93788\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93788.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2fc98ab6fe8acabd13eb09dc17426a33cf9f27f7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,346a558491241cbe8fef82b3d8f62d1a6b6bf61f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,954e821f42aaca56073ca830c5fd4bcf1a89048c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.111)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.53)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-24T21:00:17.282689+00:00", "updated": "2026-09-28T14:15:05.632395+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-1335", "CWE-188"]}