CVE-2026-89142: In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check

Q: How do I fix CVE-2026-89142?

en7529 an7552 an7581 an7583: upgrade to newer than TLB7.8.0.0_v006. Exact commands for each OS are on this page.

Q: Is CVE-2026-89142 being exploited?

CVE-2026-89142 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2026-89142 affect?

CVE-2026-89142 affects en7529 an7552 an7581 an7583. Severity is medium (CVSS 6.3). In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.

Q: How urgent is CVE-2026-89142?

Priority 22/100. No elevated risk signals yet.

Routine

MEDIUM 6.3UPGRADE

CVE-2026-89142 is a medium-severity flaw (CVSS 6.3) affecting en7529 an7552 an7581 an7583. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.3 (Medium)
EPSS exploit chance	n/a
CISA exploited list	No
Weakness	CWE-787
Published	2026-11-06
Last modified	2026-11-06

Publisher (CNA): Airoha · Vendor: airoha technology corp. · Source: CVE Program record (NVD analysis pending)

Last updated 2026-11-06 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-11-06 03:43 UTCPublished CVE record published
2026-11-06 03:43 UTCUpdated Record last modified

airoha technology corp. en7529 an7552 an7581 an7583 UPGRADE

Affected: <= TLB7.8.0.0_v006

Fixed in: newer than TLB7.8.0.0_v006

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy en7529-an7552-an7581-an7583 || rpm -q en7529-an7552-an7581-an7583 || en7529-an7552-an7581-an7583 --version

2. UPGRADE to newer than TLB7.8.0.0_v006 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade en7529-an7552-an7581-an7583

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade en7529-an7552-an7581-an7583

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Advisories and coverage

Research and news

VulDB Recent Entries: CVE-2026-89142 | Airoha Technology Corp. AN7552/AN7581/AN7583/EN7529 up to TLB7.8.0.0_v006 out-of-bounds write 2026-11-06

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-89142?

en7529 an7552 an7581 an7583: upgrade to newer than TLB7.8.0.0_v006. Exact commands for each OS are on this page.

Is CVE-2026-89142 being exploited?

CVE-2026-89142 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-89142 affect?

CVE-2026-89142 affects en7529 an7552 an7581 an7583. Severity is medium (CVSS 6.3). In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.

How urgent is CVE-2026-89142?

Priority 22/100. No elevated risk signals yet.

Software pages

Wi-Fi vulnerabilities

References

← Back to latest CVEs