Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that expectation can therefore be read beyond the skb payload. Record -EMSGSIZE for a short response, complete the waiter, and return the stored status from the command path. This also prevents callers from consuming stale response bytes as a successful reply.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Heads-up: the CVE-2026-98828 ath9k fix (in 7.2.10+, 6.18.56+, 6.12.113+, 7.3) breaks AR9271 USB adapters. The firmware acks register writes with an empty WMI payload; the fix rejects that, so every write fails and ip link set up returns "Message too long". #linux #wifi