CVE-2026-74341

A flaw was found in the wcn36xx Wi-Fi driver in the Linux kernel. The firmware response dispatcher in this driver fails to validate the length of synchronous Hardware Abstraction Layer (HAL) responses. This allows an attacker to craft an oversized firmware response, leading to a heap buffer overflow. The overflow can result in the execution of arbitrary code or a denial of service.

This vulnerability is rated as Moderate impact because exploitation requires compromised wireless firmware or direct access to specific Qualcomm hardware to trigger the buffer overflow. In default Red Hat Enterprise Linux environments, the wcn36xx driver is not enabled or shipped, rendering enterprise installations unaffected in standard configurations. Systems lacking this specific mobile Wi-Fi hardware or kernel driver configuration are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.