{"id":"CVE-2026-97518","summary":"wifi: cfg80211: reject duplicate wiphy cipher suite entries","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: reject duplicate wiphy cipher suite entries\n\nDuplicate entries in wiphy-\u003ecipher_suites do not describe any\nadditional capability, but cfg80211 currently accepts them and leaves\nindividual consumers to deal with them.\n\nOne such consumer is the WEXT compatibility code, which appends a WEP\nkey length for each WEP cipher entry it sees. Repeated WEP entries can\ntherefore overflow the fixed iw_range::encoding_size array returned by\nSIOCGIWRANGE.\n\nReject duplicate cipher suite entries in wiphy_register() instead.\nThis keeps the cipher suite invariant in one place and makes malformed\nwiphy descriptions fail early with -EINVAL, rather than relying on a\nsingle cfg80211 user to handle duplicates correctly.","modified":"2026-11-04T14:27:26.876457126Z","published":"2026-09-24T16:05:18.072Z","related":["SUSE-SU-2026:5091-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97518.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1305f8b925fe92edf5fec183588dfc7db719180b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4cbb2360f4d8c29e67bc7a8bf6ba0ae096583923"},{"type":"WEB","url":"https://git.kernel.org/stable/c/539d7f795bf0c41fb533c99e6010cdfaf5a1b6a6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7187d145d9042b037e4f10538f70cf95e380219f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d12e92e72db914e1ea777c6f246f6be75985438e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97518.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97518"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"2ab658f9ce218ae93b3d2db2b3fe68bfefb81196"},{"fixed":"539d7f795bf0c41fb533c99e6010cdfaf5a1b6a6"},{"fixed":"d12e92e72db914e1ea777c6f246f6be75985438e"},{"fixed":"1305f8b925fe92edf5fec183588dfc7db719180b"},{"fixed":"4cbb2360f4d8c29e67bc7a8bf6ba0ae096583923"},{"fixed":"7187d145d9042b037e4f10538f70cf95e380219f"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97518.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.32"},{"fixed":"6.1.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97518.json"}}],"schema_version":"1.9.2"}