kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers

A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...

AZL-93351 CVE-2026-64255 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checking that stamask is non-zero. When stamask is zero, ffs returns 0 and...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mld: Validate stamask before using ffs in BA session handlers. Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID, without checking that stamask is non-zero. When stamask is zero, ffs return...