CVE-2026-74488 evidence review
Linux
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames mwifiex_11n_dispatch_amsdu_pkt() splits an A-MSDU with ieee80211_amsdu_to_8023s() and walks the resulting subframes. For each subframe it passes the subframe data pointer to mwifiex_process_tdls_action_frame(), but pairs it with skb->len, the length of the A-MSDU parent, instead of rx_skb->len: rx_skb = __skb_dequeue(&list); rx_hdr = (struct rx_packet_hdr *)rx_skb->data; if (ISSUPP_TDLS_ENABLED(priv->adapter->fw_cap_info) && ntohs(rx_hdr->eth803_hdr.h_pr...
This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.
Identify the product and installed version
Record whether Linux is present, where it is installed, and which interfaces are exposed.
- Record the product name, package or appliance identifier, and installed version.
- Identify internet-facing, administrative, API, and internal access paths.
- Preserve the pre-change configuration and relevant service logs.
Compare the affected range
Use the current record as an identification aid: >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < 707664027bb9307f7268eda403af7c4ccd9b8644, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < 3b02275833a0d3e6583627995d614fa99bdf364f, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < a1f0f7dc7eb15754e6931b433edb7beb754c996a, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < 25e5a3fe4f15e30f74eca42cbf3bcc3a3fbeda79, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < ece2ebb34247d573142617dfc534a9dc11ba59be, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < c9dcfe6b8b71369e1d732e2ff622c3696a2f032c, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < 5a21ab03829cb6d2682c127f22e2b9cd63b4393f, >= 776f742040ca5eb6242c60f29ac73d5752a5b621 < 99a948382af8a225e2d5e54a7052158cd6281cc6, >= 4.5. Resolve incomplete inventory results before deciding that an asset is unaffected.
Verify the authoritative remediation source
Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.
Operational boundary
This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.