CVE-2026-98193

A flaw was found in the Linux kernel's libipw wireless driver. When processing Temporal Key Integrity Protocol (TKIP) network frames, the driver assumes the frame contains a complete Message Integrity Check (MIC) without verifying that the packet meets the minimum expected length. An attacker within Wi-Fi range can send a specially crafted, truncated wireless frame to cause an integer wrap and trigger an out-of-bounds memory read. This issue primarily allows an attacker to cause a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.