AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74408

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ath9k wireless driver, where an out-of-bounds (OOB) access can occur due to improper handling of the firmware transmission status queue ID. This flaw could potentially lead to memory corruption or system instability, making it critical for users operating systems with the ath9k driver to prioritize patching. Organizations relying on Linux systems with this driver should assess their exposure and apply the necessary updates to mitigate any risks associated with this vulnerability.

CVE
CVE-2026-74408
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a 4-bit hardware field (0-15), but the txq array only has ATH9K_NUM_TX_QUEUES (10) entries. A qid >= 10 causes an OOB array access. Add a bounds check on ts.qid before using it as an array index.