CVE-2026-97492

A vulnerability exists in the Linux kernel 's mac80211 component where calling ieee80211_handle_reconfig_failure during a failed NAN reconfiguration causes all interfaces to be marked as not in the driver. This leads to dangling pointers to objects like stations and links (specifically noted for ...

CVE-2026-97492 wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

CVE-2026-97492 wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

CVE-2026-93804 wifi: mac80211: ibss: wait for in-flight TX on disconnect

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

EUVD-2026-86191

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93804 wifi: mac80211: ibss: wait for in-flight TX on disconnect

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93804

The Linux kernel contains a vulnerability in the wifi: mac80211 component related to IBSS (Independent Basic Service Set) disconnection. A cross-CPU race condition exists in ieee80211_ibss_disconnect() because the carrier is turned off and the driver is notified to leave before all in-flight tran...

CVE-2026-93802 wifi: rsi: validate beacon length before fixed buffer copy

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsipreparebeacon copies the mac80211 beacon frame after FRAMEDESCSZ into a management skb whose usable tailroom may be smaller than MAXMGMTPKTSIZE after alignment. Valida...

CVE-2026-93802

The Linux kernel is affected by a vulnerability in the wifi: rsi component. The rsi_prepare_beacon() function fails to validate the beacon length before copying the mac80211 beacon frame into a management skb. This can lead to a buffer copy issue because the usable tailroom of the skb may be smal...

EUVD-2026-86143

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be expressed in the corresponding mac80211 rate space e.g. an HE frame...

CVE-2026-93271 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be expressed in the corresponding mac80211 rate space e.g. an HE frame...

CVE-2026-93271 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be expressed in the corresponding mac80211 rate space e.g. an HE frame...

CVE-2026-93271

The Linux kernel contains a vulnerability in the ath11k driver where it can receive HT/VHT/HE frames with a reported MCS value exceeding the maximum allowed by the mac80211 rate space (e.g., MCS 12 in HE mode). The ath11k_dp_rx_h_rate() function fails to cap these values, leaving invalid metadata...

PT-2026-98002

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wifi rsi component where the rsi prepare beacon function copies a mac80211 beacon frame into a management skb socket buffer without properly validating the beacon...

PT-2026-104943

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211 ibss disconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

PT-2026-104903

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211 handle reconfig failure when not needed In case reconfiguration of NAN fails, we call ieee80211 handle reconfig failure, that marks all interfaces as not in the driver. Then, at the error path...

CVE-2026-97511: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band the frame will be sent. Therefore we set info-band to NUMNL80211BANDS. However, this leads to out-of-bound access in...

CVE-2026-93804: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

Linux Distros Unpatched Vulnerability : CVE-2026-93271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be...

Linux Distros Unpatched Vulnerability : CVE-2026-97492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that mar...