# wifi: p54: validate curve data length in the calibration curve converters

CVE record · `CVE-2026-98188`

- **Identifiers:** `CVE-2026-98188`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 6 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:44 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 81084c967c18233b19799a0c3352ebac043f31e2` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 41cdf14bf4b52fbe4673a172c2a6ad756cb08111` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 03d313e3dfb49a44c10a5c423452967694fb85e2` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 42f4b03971f9d6329c4cbd1ea5155210d16ab65b` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 4d767d6f8753db22bfc14c2724bd9cee677ffb03` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before 3bdcc4d61212b001b8752d80036509b4974ce16c` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before b0c906107150b16925ee66da09127259864c7f36` (git)
  - affected: `eff1a59c48e3c6a006eb4fe5f2e405a996f2259d to before ce858fa6b8a214dee5adb82358885fa024cdd887` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.24`
  - unaffected: `before 2.6.24` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.54 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.8 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98188](https://www.cve.org/CVERecord?id=CVE-2026-98188)
- [NVD: CVE-2026-98188](https://nvd.nist.gov/vuln/detail/CVE-2026-98188)

### References from the CNA

- <https://git.kernel.org/stable/c/81084c967c18233b19799a0c3352ebac043f31e2>
- <https://git.kernel.org/stable/c/41cdf14bf4b52fbe4673a172c2a6ad756cb08111>
- <https://git.kernel.org/stable/c/03d313e3dfb49a44c10a5c423452967694fb85e2>
- <https://git.kernel.org/stable/c/42f4b03971f9d6329c4cbd1ea5155210d16ab65b>
- <https://git.kernel.org/stable/c/4d767d6f8753db22bfc14c2724bd9cee677ffb03>
- <https://git.kernel.org/stable/c/3bdcc4d61212b001b8752d80036509b4974ce16c>
- <https://git.kernel.org/stable/c/b0c906107150b16925ee66da09127259864c7f36>
- <https://git.kernel.org/stable/c/ce858fa6b8a214dee5adb82358885fa024cdd887>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98188>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98188/>. Everything for agents: <https://agentprime.io/llms.txt>.