CVE-2026-100078
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass…
- Risk score
- 43/100
- CVSS
- 5.5 v3.1
- Exploit chance (30 days)
- 0.1%
- Published
- 25 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwl_mei_write_cyclic_buf() should be the cldev but the q_head pointer is passed instead. Fix it.
- Affected
- Linux kernel
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Linux kernel: Amber, patch this week. In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START The SCTP_CMD_TIMER_START handler checks timer_pending() before calling timer_reduce(). The timer can expire and detach between these operations, causing timer_reduce() to rearm the timer without taking t…
The flaws
- CVE-2026-100078: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass… (CVSS 5.5 · EPSS 0%)
- CVE-2026-98130: Race condition (CVSS 8.1 · EPSS 0%)
- CVE-2026-98115: Race condition (CVSS 8.8 · EPSS 0%)
- CVE-2026-98052: In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last… (CVSS 7.8 · EPSS 0%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Linux kernel
Where it stands
- No known exploitation
Connects to
- Same weakness: Race condition (CWE-362). 93 other warnings in 30 days
- Same product: Earlier Linux kernel warnings. 61 in the last 90 days
Why it is Yellow
- CVSS 5.5 medium
- On your watchlist: linux kernel
References
- https://git.kernel.org/stable/c/034445e19f12bb8771c58e2ecf1fbd6eac9b5fac
- https://git.kernel.org/stable/c/082b353c05b8eaf07e03fc1918c176cd3c216e25
- https://git.kernel.org/stable/c/6b7d5abf3e374ca3af31ceb6b9b2efc7a48afde3
- https://git.kernel.org/stable/c/905f57aefde4f4092a411c8a55856182fb1c7598
- https://git.kernel.org/stable/c/ee91ae7f5815345612d8c0afd5d7efed361bcdb5
- https://git.kernel.org/stable/c/f22ad9d1077c83718d9e6c84b71726287c1d1ad3
Original description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwl_mei_write_cyclic_buf() should be the cldev but the q_head pointer is passed instead. Fix it.
Last activity 25 Sep 2026. Patch Forecast updates every hour.