← Back

CVE-2026-22978

nvd nist
Published: Jan 23, 2026Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ }; Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.

Affected (10)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Linux
2.6.27 ≤ version < 5.10.248
5.11 ≤ version < 5.15.198
5.16 ≤ version < 6.1.161
6.13 ≤ version < 6.18.6
6.2 ≤ version < 6.6.121
6.7 ≤ version < 6.12.66
Version 6.19 rc1
Version 6.19 rc2
Version 6.19 rc3
Version 6.19 rc4

References (7)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.