CVE-2026-46092

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: check for PCI upstream bridge existence

pci_upstream_bridge() returns NULL if the device is on a root bus. If 8821CE is installed in the system with such a PCI topology, the probing routine will crash. This has probably been unnoticed as 8821CE is mostly supplied in laptops where there is a PCI-to-PCI bridge located upstream from the device. However the card might be installed on a system with different configuration.

Check if the bridge does exist for the specific workaround to be applied.

Found by Linux Verification Center (linuxtesting.org) with Svace static analysis tool.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 617339466fda09916c4b4151fa5e6a9c1fdae353, < 959c13da6c36167ce1016d400a6104d2367f686e; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < 3b89b4c095804c478d50376285e66700cf3c045f; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < cc9b6303e7ea91bc360b42c7edc1fe9ceb2f47fe; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < 6c53d68e3bcfc8faccdd76c3383a9232b05c9ae6; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < 000134a20bbf89b1152520a2eef71f91fdb83a5b; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < 3bbbb56204f7359ce2139a9341b43b52a186261c; >= 24f5e38a13b5ae2b6105cda8bb47c19108e62a9a, < eb101d2abdcccb514ca4fccd3b278dd8267374f6; f21e8cb927fa9da49490b74ddda3856a828b82d6; >= 5.15.17, < 5.15.210; >= 5.16.3, < 5.17
LinuxLinux5.17
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-460937.8In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can CVE-2026-460947.1In the Linux kernel, the following vulnerability has been resolved: ext4: fix bounds check in check_xattrs() to prevent out-of-bounds accesCVE-2026-460955.5In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move theCVE-2026-460965.5In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_buf_destroy() in tpm2_read_public() tpmCVE-2026-460977.8In the Linux kernel, the following vulnerability has been resolved: Input: edt-ft5x06 - fix use-after-free in debugfs teardown The commit CVE-2026-460985.5In the Linux kernel, the following vulnerability has been resolved: net: caif: clear client service pointer on teardown `caif_connect()` cCVE-2026-460998.1In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels seg6_input_coreCVE-2026-46106.4The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pm_authorCVE-2026-461007.8In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially reverts commit 9d5403bCVE-2026-461015.5In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operandsCVE-2026-461027.5In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the streamCVE-2026-461035.5In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and
CVE-2026-46092: Medium severity, CVSS 5.5 | Vulnix