CVE-2026-90408 | Linux Kernel up to 7.2.5 ath12k ath12k_wmi_process_csa_switch_count_event num_vdevs out-of-bounds

A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. Impacted is the function ath12k_wmi_process_csa_switch_count_event of the component ath12k. Performing a manipulation of the argument num_vdevs results in out-of-bounds read.

This vulnerability is reported as CVE-2026-90408. The attack requires a local approach. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More