Log in Start free

Vulnerability · Published Oct 28, 2026 · Assigned by Linux

CVE-2026-99100wifi: p54: validate firmware record lengths

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 94.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware record lengths The p54 firmware parser accesses component ID and component version records without checking that their lengths cover the fields being read. A malformed record can therefore make the parser read past the record. Validate the component ID and component version record lengths before accessing their data. The descriptor record is also checked against the shortest descriptor length found in the supported firmware images. Reject descriptor values that underflow the RX offset or produce an empty RX range before updating the driver state.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-99100
Debian:13linux6.12.115-2DEBIAN-CVE-2026-99100
Debian:14linux7.2.13-1DEBIAN-CVE-2026-99100
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99100
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-99100
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-99100
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-99100

Affected products (as reported)

VendorProductVersions
Linux Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before 87a9aba92485889d510052e474999a6ec00b888ceff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before d5c28994b2c1440480fccd0b6c2ce72c23bb9fffeff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before 9af312d3607c8f9b5166a19cbf40cee351cc3a1deff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before dda5245afc3470d70406764e3d9f5508e534920aeff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before f4c6fcc2ad462ffd76d6e6f909bcd6ae0391f5b7eff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before f641066b0ddcd1b0cf007c0d04f9c966f6e888aeeff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before 8c4f962f368d5e17481f3c2c5a43028953e137a5eff1a59c48e3c6a006eb4fe5f2e405a996f2259d – before db7b86bd97b380ece8fa39cfdd7502a9fd35e56f
Linux Linux 2.6.24

References