CVE-2026-89524

A flaw was found in the ath6kl Wi-Fi driver of the Linux kernel. An integer underflow vulnerability occurs when processing Wi-Fi association requests or responses that are shorter than expected. This can cause the system to read beyond the intended buffer, leading to the disclosure of adjacent memory to a remote attacker. This information disclosure could potentially expose sensitive data.

This vulnerability is rated as an Important severity flaw because an unauthenticated attacker within adjacent wireless range can exploit an integer boundary error to leak adjacent kernel slab memory or potentially trigger an operational disruption. The exposure is limited to hosts equipped with physical Qualcomm Atheros ath6kl Wi-Fi hardware actively handling connection events. Standard Red Hat Enterprise Linux installations are not affected as the driver code is not built or enabled in supported enterprise kernel configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.