CVE-2026-74341 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
A heap buffer overflow in the Linux kernel wcn36xx WiFi driver allows attackers to execute arbitrary code or cause a denial of service via oversized firmware responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74341?
CVE-2026-74341 is a high-severity memory corruption vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte hal_buf without validating the response length. A response exceeding WCN36XX_HAL_BUF_SIZE causes a heap buffer overflow with firmware-controlled content.
Add a bounds check on the response length.
Which versions are affected by CVE-2026-74341?
How do I fix CVE-2026-74341?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-74341 being exploited?
There is no known exploitation of CVE-2026-74341 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74341, DEBIAN-CVE-2026-74341, GHSA-8q74-796q-49pm, UBUNTU-CVE-2026-74341.