CVE-2026-98830

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A firmware response with a length field larger than expected overruns the caller buffer and reads past the end of the reply allocation. Replace the dead -ENOMEM check with an active validation that reply->length fits within val_len before the memcpy.

Is your site exposed to CVE-2026-98830?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0021

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/02886c18a340da59df57365f29009e1258bfe333 https://git.kernel.org/stable/c/71d140099165de03128c00dd129f1eab21c6a3c4 https://git.kernel.org/stable/c/7acb36fd60a3e7b858f12e69a919c3609b281408 https://git.kernel.org/stable/c/819d4c1323e2a9b7329021d5367aa01add22b5dc https://git.kernel.org/stable/c/ce67ebe9d8629776ce38e6995ae72fb903c828db

Frequently Asked Questions

What is CVE-2026-98830? +

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes from the firmware response into the caller-provided buffer without checking that reply->length does not exceed val_len. A firmware response with a length field larger than expected overruns the caller buffer and reads past the end of the reply allocation. Replace the dead -ENOMEM check with an active validation that reply->length fits within val_len before the memcpy.

How do I check if I'm vulnerable to CVE-2026-98830? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.