CVE-2026-89142 · Infrastructure
NO FIX YET
The Wi-Fi NPU firmware has a bounds check that is wrong, allowing an out-of-bounds write. A local user with execution privileges can trigger a denial of service.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Systems with the affected Wi-Fi NPU firmware installed. The sources do not name the vendor, product models or firmware versions affected. Exploitation requires a local account with execution privileges.
Not affected if no-local-user-access
Who cares npu-firmware, wi-fi
Unknown from the sources.
No fix yet, per the sources.
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.