Vulnerability feed

Executive summary

A fix in the Linux kernel's Intel wireless driver (iwlwifi, mvm component) addresses a flaw in how scheduled Wi-Fi scans handle oversized information elements, which could overflow a fixed buffer. The advisory does not state a severity rating for this issue. The advisory shows a stable-tree commit that corrects the ordering of length validation and reports the change, but it does not give explicit upgrade instructions.

Technical summary

The flaw is a buffer handling problem: the scheduled scan code built the probe request before the length check (iwl_mvm_scan_fits), so oversized information elements could be copied into a fixed-size buffer before validation. The fix moves iwl_mvm_build_scan_probe() after the fits check and changes max_sched_scan_ie_len to use iwl_mvm_max_scan_ie_len() so userspace limits account for driver-inserted DS/TPC bytes. The advisory does not state the attack vector, required privileges, or preconditions. It does not state affected or fixed kernel version numbers, a CVSS score, workarounds, or exploitation status, and no detection guidance is given.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/05f79cea3b15cfe…05ddcfd51ebee15d908a

Impact if exploited

How it is exploited

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affects

LinuxIntelLinuxLinux kernelIntel iwlwifi

Executive summary

This advisory describes a fix in the Linux kernel's iwlwifi wireless driver for Intel wireless adapters (mld component). A kernel warning was triggered when a system suspended with Wake-on-WLAN configured while not connected to a network. The advisory does not state a severity rating, and the vendor-style fix removes the warning and lets the system suspend normally.

Technical summary

The flaw is a WARN_ON() check in the iwlwifi mld driver's WoWLAN suspend path (iwl_mld_wowlan_suspend in d3.c) that fired when the device was not associated and no netdetect configuration was present. The fix removes the WARN_ON() and continues to return 1 so the driver disconnects and suspends. The advisory does not state the attack vector, preconditions for exploitation beyond this suspend scenario, a CVSS score, affected or fixed kernel version numbers, workarounds, or whether exploitation has been observed. Detection guidance is not stated. The fix is shown as a commit to the stable tree dated 2026-06-03 in the commit metadata.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/301b0dfa9db3f1e…95e803bbd88fbd878c7c

Score

No CVSS score published.

Affects

LinuxIntelLinuxLinux kernelIntel iwlwifi