CVE-2026-93788 wifi: iwlwifi: acpi: validate WGDS table revision index
An attacker with local access or physical proximity can cause a kernel crash by triggering an undefined shift in the iwlwifi driver via a malformed ACPI table.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-93788?
CVE-2026-93788 is a vulnerability in Linux, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: acpi: validate WGDS table revision index
Check tbl_rev bounds before BIT(tbl_rev) to avoid undefined shifts when firmware reports an invalid revision value.
Which versions are affected by CVE-2026-93788?
How do I fix CVE-2026-93788?
Apply the vendor's patch.
Is CVE-2026-93788 being exploited?
There is no known exploitation of CVE-2026-93788 in the wild and no public exploit code.
Sources
Also known as AZL-103739, BELL-CVE-2026-93788, DEBIAN-CVE-2026-93788, GHSA-8w6g-qccj-392r, UBUNTU-CVE-2026-93788.