# CVE-2026-93806

Remote kernel memory corruption via crafted Wi‑Fi association response

- Page: https://www.vulneraibility.com/cve/CVE-2026-93806
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.25% (percentile 17.0)
- Published: 2026-09-24

## Affected versions

- Linux: affected >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < a57310600c1e2b9ada0f37c96e8f48aef47d3093; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < 78ac450ad4624d6b2999cb4eeb28916767f81247; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < b760113aeca2e9362d56bf9e9263373ffe6c8eb3; < 6.12.111; < 6.18.53; fixed in >= 6.12.111 and <= 6.12.*, >= 6.18.53 and <= 6.18.*, >= 7.2 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Attackers can send crafted Wi‑Fi assoc responses to trigger kernel memory corruption, causing DoS or possible kernel‑level code execution.

## Action

Immediate action required

## Recommendation

Apply kernel updates/stable patches and update Wi‑Fi device firmware ASAP

## References

- [other] https://git.kernel.org/stable/c/3bcaaaa4ad334053ceea2ea2f0623f22afe2e1ac
- [other] https://git.kernel.org/stable/c/71be658246c903b9e96976a23c23800675896a1b
- [other] https://git.kernel.org/stable/c/a57310600c1e2b9ada0f37c96e8f48aef47d3093
- [other] https://git.kernel.org/stable/c/78ac450ad4624d6b2999cb4eeb28916767f81247
- [other] https://git.kernel.org/stable/c/b760113aeca2e9362d56bf9e9263373ffe6c8eb3

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.