CVE-2026-74408

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/08/2026
Last modified:
15/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: ath9k: fix OOB access from firmware tx status queue ID<br /> <br /> ath_tx_edma_tasklet() accesses sc-&gt;tx.txq[ts.qid] where ts.qid is a<br /> 4-bit hardware field (0-15), but the txq array only has<br /> ATH9K_NUM_TX_QUEUES (10) entries. A qid &gt;= 10 causes an OOB array<br /> access.<br /> <br /> Add a bounds check on ts.qid before using it as an array index.

Impact