CVE-2026-92496

A flaw was found in the ath11k Wi-Fi driver in the Linux kernel. This vulnerability allows a buffer overread to occur in the ath11k_wmi_tlv_op_rx() function. The driver reads the firmware buffer without adequately verifying its size, which could lead to reading data beyond the allocated memory. This issue may result in information disclosure or a denial of service (DoS) due to system instability.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires physical systems equipped with Qualcomm ath11k wireless hardware as well as local access to trigger malformed firmware message processing. Standard Red Hat Enterprise Linux server and container environments typically run without wireless networking hardware and do not load this driver by default. In deployments where affected hardware is present, an attacker could trigger a kernel crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.