https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 14:34:02 +0000 https://db.gcve.eu/vuln/cve-2026-93803 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: libipw: fix key index receive bound checks</p> <p>libipw_rx() reads skb-&gt;data[hdrlen + 3] to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the existing guard only checks skb-&gt;len &gt;= hdrlen + 3, which proves bytes up to hdrlen + 2 but not the byte at hdrlen + 3.</p> <p>Require hdrlen + 4 bytes before reading that item in both paths. This is a local source-boundary check only; it does not change the key index semantics.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: libipw: fix key index receive bound checks</p> <p>libipw_rx() reads skb-&gt;data[hdrlen + 3] to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the existing guard only checks skb-&gt;len &gt;= hdrlen + 3, which proves bytes up to hdrlen + 2 but not the byte at hdrlen + 3.</p> <p>Require hdrlen + 4 bytes before reading that item in both paths. This is a local source-boundary check only; it does not change the key index semantics.</p> https://db.gcve.eu/vuln/cve-2026-93803