CVE-2026-98828

A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface (WMI) command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. A malicious or compromised device can return a truncated response to trigger an out-of-bounds read beyond the allocated packet buffer. This issue can result in a Denial of Service (DoS) due to a system crash or potentially lead to information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.