CVE-2026-22978

Updated: 2026-02-26

Description:

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ }; Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space. A flaw was found in the Linux kernel's Wi-Fi subsystem. This information disclosure vulnerability arises from a 32-bit padding hole in the `struct iw_point` on 64-bit architectures. A local user could exploit this by reading uninitialized kernel memory, potentially disclosing sensitive kernel data to user space.

CVSS3: 5.5

Vendor State

KernelCare State