{"id":28748,"date":"2026-09-25T04:31:40","date_gmt":"2026-09-24T20:31:40","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97516"},"modified":"2026-09-25T04:31:40","modified_gmt":"2026-09-24T20:31:40","slug":"cve-2026-97516","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97516","title":{"rendered":"CVE-2026-97516 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: Add NULL"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: rtw88: Add NULL check for chip-&gt;edcca_th in rtw_fw_adaptivity_result()<\/p>\n<p>It was recently reported that rtw_fw_adaptivity_result()<br \/>\nin fw.c dereferences rtwdev-&gt;chip-&gt;edcca_th without<br \/>\na NULL check. The issue is that devices with the<br \/>\n8821CE chip don&#8217;t define edcca_th in their chip<br \/>\ninfo. As a result, when rtw_fw_adaptivity_result()<br \/>\ntries to dereference it, the kernel triggers an oops.<\/p>\n<p>Add a NULL check for edcca_th before dereferencing<br \/>\nit in rtw_fw_adaptivity_result() in fw.c. Placing<br \/>\nthe check at the function entry avoids logging any<br \/>\ngarbage values.<\/p>\n<p>This change does not address the root cause for<br \/>\nthis behavior, but it prevents the NULL dereference<br \/>\nand the resulting oops while a more permanent solution<br \/>\nis developed.<\/p>\n<p>Tested on a 8822CE chip which defines edcca_th, so<br \/>\nthis issue is not present on it, but it still uses<br \/>\nthis driver and I can verify there are no regressions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: rtw88: Add NULL check for chip-&gt;edcca_th in rtw_fw_adaptivity_result()<\/p>\n<p>It was recently reported that rtw_fw_adaptivity_resul<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28748","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28748","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28748"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28748"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28748"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}