Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-22978

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ }; Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:fbc8da45a2844ddd8f38c4d1d5cf69da6ef1daa52a8378762aec4b37499c65bc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/wireless/wext-core.c","net/wireless/wext-priv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.161"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/wireless/wext-core.c","net/wireless/wext-priv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d943b5f592767b107ba8c12a902f17431350378c","status":"affected","version":"87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4","versionType":"git"},{"lessThan":"a3827e310b5a73535646ef4a552d53b3c8bf74f6","status":"affected","version":"87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4","versionType":"git"},{"lessThan":"442ceac0393185e9982323f6682a52a53e8462b1","status":"affected","vers…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/wireless/wext-core.c","net/wireless/wext-priv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.161"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/wireless/wext-core.c","net/wireless/wext-priv.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d943b5f592767b107ba8c12a902f17431350378c","status":"affected","version":"87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4","versionType":"git"},{"lessThan":"a3827e310b5a73535646ef4a552d53b3c8bf74f6","status":"affected","version":"87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4","versionType":"git"},{"lessThan":"442ceac0393185e9982323f6682a52a53e8462b1","status":"affected","vers…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/024f71a57d563fbe162e528c8bf2d27e9cac7c7b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/21cbf883d073abbfe09e3924466aa5e0449e7261"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/442ceac0393185e9982323f6682a52a53e8462b1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/a3827e310b5a73535646ef4a552d53b3c8bf74f6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d943b5f592767b107ba8c12a902f17431350378c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/e3c35177103ead4658b8a62f41e3080d45885464"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e0cbdc95f542efaa8726f5841ceab0802208014068043cb66d302dd539c0e050 · sha256:a71d091bdbb095cc… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer