5.5

CVE-2026-100078: linux

CVSS: 5.5v3.1MediumUndergoing analysis
AliasesUBUNTU-CVE-2026-100078DEBIAN-CVE-2026-100078
Published 25-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-100078 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.11% chance of exploitation in the next 30 days, higher than 1.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.11%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2026-0506OPENSUSE-SU-2026:12074-1

Timeline

  1. 25-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to function The first argument to iwl_mei_write_cyclic_buf() should be the cldev but the q_head pointer is passed instead. Fix it.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.11%

Chance of exploitation in the next 30 days

Percentile

1%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

26-09-202619-10-2026
EPSS score
0.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux2 products
  • linux≥ 652291601459272d52b6ba12811f0b60b3e6444f, < 034445e19f12bb8771c58e2ecf1fbd6eac9b5fac | ≥ 652291601459272d52b6ba12811f0b60b3e6444f, < f22ad9d1077c83718d9e6c84b71726287c1d1ad3 | ≥ 652291601459272d52b6ba12811f0b60b3e6444f, < ee91ae7f5815345612d8c0afd5d7efed361bcdb5 | ≥ 652291601459272d52b6ba12811f0b60b3e6444f, < 6b7d5abf3e374ca3af31ceb6b9b2efc7a48afde3 | ≥ 652291601459272d52b6ba12811f0b60b3e6444f, < 082b353c05b8eaf07e03fc1918c176cd3c216e25 | ≥ 652291601459272d52b6ba12811f0b60b3e6444f, < 905f57aefde4f4092a411c8a55856182fb1c7598 | 5.17
  • linux_kernel≥ 5.17, < 6.1.188 | ≥ 6.2, < 6.6.157 | ≥ 6.7, < 6.12.110 | ≥ 6.13, < 6.18.52 | ≥ 6.19, < 7.2.6

3 vendors · 146 products

References

10 links