CVE-2026-80635 Linux CVE debrief

Who should care

Linux kernel maintainers, wifi wcn36xx users, organizations relying on Linux kernel-based systems, and security teams responsible for vulnerability management should prioritize patching for this HIGH-severity vulnerability. The vulnerability affects the Linux kernel's wifi wcn36xx driver and has a significant impact due to its potential to corrupt BA session state. Affected operators and platforms should review and apply patches as soon as possible to mitigate potential risks.

Technical summary

The Linux kernel wifi wcn36xx driver has an out-of-bounds read vulnerability due to insufficient validation of firmware response length. This vulnerability, tracked as CVE-2026-80635, has a HIGH CVSS score of 8.8 and could potentially corrupt BA session state. The vulnerability is resolved by adding validation that the response includes the candidate data. The affected product is the Linux kernel, specifically the wifi wcn36xx driver. The vulnerability does not require authentication or specific conditions to be exploited, making it a high-priority patch for Linux kernel maintainers and users of wifi wcn36xx.

Defensive priority

Linux kernel vulnerability with HIGH CVSS score of 8.8; prioritize patching for wifi wcn36xx firmware response validation.

Recommended defensive actions

• Apply patch to validate wifi wcn36xx firmware response length
• Inventory Linux kernel installations for wifi wcn36xx usage
• Monitor for suspicious wifi wcn36xx activity
• Verify Linux kernel patch deployment
• Update incident response plan to include wifi wcn36xx vulnerability
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record for CVE-2026-80635 was published on 2026-08-28T08:16:48.400Z and has not been modified since then. The NVD entry is currently marked as Received. The Linux kernel wifi wcn36xx driver has an out-of-bounds read vulnerability due to insufficient validation of firmware response length. This vulnerability has a HIGH CVSS score of 8.8. The official CVE Program record and NIST NVD detail page provide vulnerability metadata. Linux kernel source references detail patch commits for wifi wcn36xx firmware response validation. However, the current details do not provide specific information on the affected products, exploitation methods, or potential impacts beyond the Linux kernel context.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.