Bug 2432383 (CVE-2026-22978) - CVE-2026-22978 kernel: wifi: avoid kernel-infoleak from struct iw_point
Summary: CVE-2026-22978 kernel: wifi: avoid kernel-infoleak from struct iw_point
Keywords:
Status: NEW
Alias: CVE-2026-22978
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-01-23 16:02 UTC by OSIDB Bzimport
Modified: 2026-01-23 19:00 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-01-23 16:02:08 UTC
In the Linux kernel, the following vulnerability has been resolved:

wifi: avoid kernel-infoleak from struct iw_point

struct iw_point has a 32bit hole on 64bit arches.

struct iw_point {
  void __user   *pointer;       /* Pointer to the data  (in user space) */
  __u16         length;         /* number of fields or size in bytes */
  __u16         flags;          /* Optional params */
};

Make sure to zero the structure to avoid disclosing 32bits of kernel data
to user space.


Note You need to log in before you can comment on or make changes to this bug.