In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9K_NUM_TX_QUEUES (10) entries. A qid >= 10 causes an OOB array access. Add a bounds check on ts.qid before using it as an array index.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
References
Link Providers
https://git.kernel.org/stable/c/336d4c8cd9b1646060ee690c881d465dfc09c6c0 cve-icon cve-icon
https://git.kernel.org/stable/c/46ca1451f61b598f45cb5259e066d305444d95fc cve-icon cve-icon
https://git.kernel.org/stable/c/5435fd3edcb11c7cc4002847c83e9a50b49284dc cve-icon cve-icon
https://git.kernel.org/stable/c/734db72d55ca578a344dfa33e30145032c074b25 cve-icon cve-icon
https://git.kernel.org/stable/c/7ce2f118a2389e8f0a64068c6fe7cc7d40639be0 cve-icon cve-icon
https://git.kernel.org/stable/c/a9e055ac62cb3fcea262d4b687ec73eed82b3379 cve-icon cve-icon
https://git.kernel.org/stable/c/f5931d06b45ed402572bfe5832fff15864ef5481 cve-icon cve-icon
https://git.kernel.org/stable/c/fb11083db9d7d6fb8f98bbba1cbfcf3fb7b4bf54 cve-icon cve-icon
History

Sat, 15 Aug 2026 13:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9K_NUM_TX_QUEUES (10) entries. A qid >= 10 causes an OOB array access. Add a bounds check on ts.qid before using it as an array index.
Title wifi: ath9k: fix OOB access from firmware tx status queue ID
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:59:16.701Z

Reserved: 2026-08-15T05:44:03.892Z

Link: CVE-2026-74408

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:42.837

Modified: 2026-08-15T06:22:42.837

Link: CVE-2026-74408

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T13:15:03Z