CVE-2026-100078 PUBLISHED

wifi: iwlwifi: mei: pass correct argument to function

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mei: pass correct argument to function

The first argument to iwl_mei_write_cyclic_buf() should be the cldev but the q_head pointer is passed instead. Fix it.

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 652291601459272d52b6ba12811f0b60b3e6444f to 034445e19f12bb8771c58e2ecf1fbd6eac9b5fac (excl.) affected from 652291601459272d52b6ba12811f0b60b3e6444f to f22ad9d1077c83718d9e6c84b71726287c1d1ad3 (excl.) affected from 652291601459272d52b6ba12811f0b60b3e6444f to ee91ae7f5815345612d8c0afd5d7efed361bcdb5 (excl.) affected from 652291601459272d52b6ba12811f0b60b3e6444f to 6b7d5abf3e374ca3af31ceb6b9b2efc7a48afde3 (excl.) affected from 652291601459272d52b6ba12811f0b60b3e6444f to 082b353c05b8eaf07e03fc1918c176cd3c216e25 (excl.) affected from 652291601459272d52b6ba12811f0b60b3e6444f to 905f57aefde4f4092a411c8a55856182fb1c7598 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected Version 5.17 is affected unaffected from 0 to 5.17 (excl.) unaffected from 6.1.188 to 6.1.* (incl.) unaffected from 6.6.157 to 6.6.* (incl.) unaffected from 6.12.110 to 6.12.* (incl.) unaffected from 6.18.52 to 6.18.* (incl.) unaffected from 7.2.6 to 7.2.* (incl.) unaffected from 7.3-rc1 to * (incl.)