Microsoft Security Response Center guidance
Vendor revision: Oct 15, 2026Release Notes
Vendor-listed releases
- 6.6.158.1-1
Vulnerability intelligence
CVE-2026-93789. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Vendor-listed releases
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: bound aligned TLV advance in FW parser
Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image.
This avoids length underflow on malformed TLVs.
Source: NVD