CVE-2026-93784

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service (DoS) or potential information disclosure by submitting a malformed Information Element (IE) buffer through wireless configuration commands. The kernel fails to properly validate the buffer before storing it, leading to out-of-bounds memory reads and kernel crashes during subsequent connection operations.

This vulnerability is rated as Moderate impact because exploitation requires local access with the ability to execute wireless configuration controls, restricting the primary risk to a denial of service (system crash). In typical Red Hat Enterprise Linux server deployments, wireless hardware is not present and wireless network extensions are unused, significantly reducing real-world exposure. Furthermore, modern platform releases including Red Hat Enterprise Linux 8 and later do not contain the affected legacy code path, limiting impact to older environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.