CVE-2026-93802
kernel: wifi: rsi: validate beacon length before fixed buffer copy
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · September 29, 2026
Description
A flaw was found in the Linux kernel's Redpine Signals (rsi) Wi-Fi driver. The driver fails to validate the length of a beacon frame against available buffer space before copying data into a management buffer. An attacker could exploit this issue by triggering the transmission or processing of an oversized beacon frame, resulting in a buffer overflow that may lead to a Denial of Service (DoS) or memory corruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')