Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Azure kernel 6.6.157.1-1 can mishandle Wi‑Fi data

published 1 month ago
Summary

The Azure Linux kernel version 6.6.157.1-1 has a flaw in its Wi‑Fi driver that could misinterpret data packets, potentially leading to incorrect handling of network traffic. This may affect the stability or security of systems that rely on that kernel for Wi‑Fi communication. Updating to the latest kernel release that includes the fix is the recommended action.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Azure Linux:3 azure kernel <= 6.6.157.1-1
Original advisory text
CVE-2026-93793 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: validate TX_CMD response layout

TX_CMD parsing uses frame_count to walk status entries and then
read the trailing SCD SSN. Make the minimum-length check follow
that exact runtime layout calculation before parsing the payload.

For new TX API, reject TX_CMD responses with frame_count != 1 and
warn/return in the aggregation handler to document that aggregated
accounting is expected via BA notifications.
Timeline
Published24 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
AZL-103553 · OSV
Track software like this
Free during beta