CVE-2026-97500 in Linux

Summary

by MITRE • 09/24/2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: phy: check length before parsing PHY status IE

Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: Linux
• Reservation: 09/24/2026
• Disclosure: 09/24/2026
• Moderation: accepted
• Entry: VDB-409671
• CPE: ready
• CWE: CWE-120 (confirmed)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Transportation, Government, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-97500
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-97500
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-97500/