CVE-2026-72029

A flaw was found in the Linux kernel's Wireless Wide Area Network (WWAN) module, specifically within the iosm component. A remote attacker, by manipulating a connected modem, could provide malformed data containing crafted offsets and lengths. This could lead to an out-of-bounds read, potentially causing memory corruption. Additionally, the flaw could allow an attacker to trigger an infinite loop, resulting in a Denial of Service (DoS) due to excessive resource consumption.

Red Hat rates this vulnerability as Moderate severity because exploitation requires specialized hardware and either physical access to attach a malicious device or a compromised cellular modem. The flaw specifically affects environments operating Intel PCIe WWAN modems driven by the iosm module, which are not present in standard enterprise servers or cloud virtual machines. In affected setups, malformed downlink frames from the modem can cause an out-of-bounds read or an infinite softirq processing loop, leading to a system denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.