CVE-2026-6231
published 2026-04-13CVE-2026-6231: The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data…
PriorityP345high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.18%
7.9th percentile
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mongodb | c_driver | < 1.30.5 | 1.30.5 |
| mongodb | c_driver | >= 2.0.0 < 2.0.2 | 2.0.2 |
| mongodb_inc | c_driver | >= 1.0 < 1.30.5 | 1.30.5 |
| mongodb_inc | c_driver | >= 2.0 < 2.0.2 | 2.0.2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv4.05.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q869-m422-4qcv: The bson_validate function may return early on specific inputs and incorrectly report success
ghsa_unreviewed·2026-04-13
CVE-2026-6231 [MEDIUM] CWE-20 GHSA-q869-m422-4qcv: The bson_validate function may return early on specific inputs and incorrectly report success
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1
VulDB
MongoDB C Driver up to 1.30.4/2.0.1 bson_validate input validation
vuldb·2026-04-13·CVSS 5.3
CVE-2026-6231 [MEDIUM] MongoDB C Driver up to 1.30.4/2.0.1 bson_validate input validation
A vulnerability was found in MongoDB C Driver up to 1.30.4/2.0.1. It has been classified as problematic. The affected element is the function bson_validate. This manipulation causes improper input validation.
This vulnerability is tracked as CVE-2026-6231. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
Red Hat
kernel: wifi: ath11k: fix warning when unbinding
vendor_redhat·2026-07-19·CVSS 5.5
CVE-2026-63822 [MEDIUM] CWE-1341 kernel: wifi: ath11k: fix warning when unbinding
kernel: wifi: ath11k: fix warning when unbinding
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix warning when unbinding
If there is an error during some initialization related to firmware,
the buffers dp->tx_ring[i].tx_status are released.
However this is released again when the device is unbinded (ath11k_pci),
and we get:
WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90
Call Trace:
free_large_kmalloc
ath11k_dp_free
ath11k_core_deinit
ath11k_pci_remove
...
The issue is always reproducible from a VM because the MSI addressing
initialization is failing.
In order to fix the issue, just set the buffers to NULL after releasing in
order to avoid the double free.
A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulner
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-63822 kernel: wifi: ath11k: fix warning when unbinding
bugzilla·2026-07-19
CVE-2026-63822 [MEDIUM] CVE-2026-63822 kernel: wifi: ath11k: fix warning when unbinding
CVE-2026-63822 kernel: wifi: ath11k: fix warning when unbinding
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix warning when unbinding
If there is an error during some initialization related to firmware,
the buffers dp->tx_ring[i].tx_status are released.
However this is released again when the device is unbinded (ath11k_pci),
and we get:
WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90
Call Trace:
free_large_kmalloc
ath11k_dp_free
ath11k_core_deinit
ath11k_pci_remove
...
The issue is always reproducible from a VM because the MSI addressing
initialization is failing.
In order to fix the issue, just set the buffers to NULL after releasing in
order to avoid the double free.
Discussion:
Upstream advisory:
https://lore.kernel.
Bugzilla
CVE-2026-6231 mongo-c-driver: bson_validate may skip validation when processing certain inputs
bugzilla·2026-04-13·CVSS 5.3
CVE-2026-6231 [MEDIUM] CVE-2026-6231 mongo-c-driver: bson_validate may skip validation when processing certain inputs
CVE-2026-6231 mongo-c-driver: bson_validate may skip validation when processing certain inputs
The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1
2026-04-13
Published