Low severity · published Jan 23, 2026
CVE-2026-22978
wifi: avoid kernel-infoleak from struct iw_point
3.3
CVSS
0.1%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: avoid kernel-infoleak from struct iw_point
struct iw_point has a 32bit hole on 64bit arches.
struct iw_point {
void __user *pointer; /* Pointer to the data (in user space) */
__u16 length; /* number of fields or size in bytes */
__u16 flags; /* Optional params */
};
Make sure to zero the structure to avoid disclosing 32bits of kernel data
to user space.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.6.27 before 5.10.248; 5.11 before 5.15.198; 5.16 before 6.1.161; 6.2 before 6.6.121; 6.7 before 6.12.66; 6.13 before 6.18.6; +4 more · source: NVD
LI
Linux · Linux
87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before d943b5f592767b107ba8c12a902f17431350378c; 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before a3827e310b5a73535646ef4a552d53b3c8bf74f6; 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before 442ceac0393185e9982323f6682a52a53e8462b1; 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8; 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before 024f71a57d563fbe162e528c8bf2d27e9cac7c7b; 87de87d5e47f94b4ea647a5bd1bc8dc1f7930db4 before e3c35177103ead4658b8a62f41e3080d45885464; +2 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-22978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-22978
Patch
https://git.kernel.org/stable/c/024f71a57d563fbe162e528c8bf2d27e9cac7c7b
Patch
https://git.kernel.org/stable/c/21cbf883d073abbfe09e3924466aa5e0449e7261
Patch
https://git.kernel.org/stable/c/442ceac0393185e9982323f6682a52a53e8462b1
Patch
https://git.kernel.org/stable/c/a3827e310b5a73535646ef4a552d53b3c8bf74f6
Patch
https://git.kernel.org/stable/c/d21ec867d84c9f3a9845d7d8c90c9ce35dbe48f8
Patch
https://git.kernel.org/stable/c/d943b5f592767b107ba8c12a902f17431350378c
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability