CVE-2026-93807
kernel: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · September 28, 2026
Description
A flaw was found in the Linux kernel's Redpine Signals (RSI) Wi-Fi driver. An attacker can trigger a Denial of Service (DoS) or information disclosure by configuring wireless encryption keys for ciphers with shorter key lengths than the Temporal Key Integrity Protocol (TKIP). The driver unconditionally reads key data from fixed memory offsets intended only for 32-byte TKIP keys, causing an out-of-bounds memory read when shorter key buffers are processed.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-125 · Out-of-bounds Read