# CVE-2026-90398

Heap overflow in Linux ath11k driver due to TLV length/stride mismatch

- Page: https://www.vulneraibility.com/cve/CVE-2026-90398
- CVSS: 8.4
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.14% (percentile 3.6)
- Published: 2026-09-17

## Affected versions

- Linux: affected >= 5b90fc760db5a969ed26d70f8e62c91915f012bd and < bbb3b3334a9ed850c5b332eedea107796e691237; >= 5b90fc760db5a969ed26d70f8e62c91915f012bd and < 75185e2b214e842b7e0af29e5d1fef155662b8b1; >= 5b90fc760db5a969ed26d70f8e62c91915f012bd and < acff2713c3212ade15051e7b421f15c89927e70f; >= 5b90fc760db5a969ed26d70f8e62c91915f012bd and < 7a246c72132eb943b5844ba79dad597b47429dba; 5.6; fixed in < 5.6, >= 6.12.110 and <= 6.12.*, >= 6.18.52 and <= 6.18.*, >= 7.2.6 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Kernel memory corruption from out‑of‑bounds writes; can cause local privilege escalation or kernel crash; triggered by malicious firmware/firmware TLVs.

## Action

Patch when possible

## Recommendation

Apply kernel update containing the ath11k fix ASAP

## References

- [other] https://git.kernel.org/stable/c/deb14c9932509c0defaa0620c9ca8d20b385a6bd
- [other] https://git.kernel.org/stable/c/b2ecd548f89a4a6c14b5eb4abc825f92b3068dda
- [other] https://git.kernel.org/stable/c/bbb3b3334a9ed850c5b332eedea107796e691237
- [other] https://git.kernel.org/stable/c/75185e2b214e842b7e0af29e5d1fef155662b8b1
- [other] https://git.kernel.org/stable/c/acff2713c3212ade15051e7b421f15c89927e70f
- [other] https://git.kernel.org/stable/c/7a246c72132eb943b5844ba79dad597b47429dba

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.