3 matches found
CVE-2026-93790
A flaw was found in the Linux kernel's iwlwifi wireless driver. An out-of-bounds memory access vulnerability exists in the Block Acknowledgement BA notification handling logic due to improper array indexing and missing bounds validation on traffic identifiers. A nearby attacker within wireless...
CVE-2026-64255
A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...
kernel: mac80211: fix spurious delBA handling
Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service system crash via a Delete Block ACK aka DELBA packet that triggers a certain state change in the absence of an aggregation session...