CVE-2026-74336

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. An out-of-bounds read vulnerability exists when parsing the S1G Sub-1 GHz TIM Traffic Indication Map Partial Virtual Bitmap PVB element. Due to an incorrect boundary check, the system can read two bytes beyond the allocated memory f...

CVE-2026-74336 wifi: mac80211: bound S1G TIM PVB walk to the TIM element

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element ieee80211s1gchecktim parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is handed in as the element payload: ieee80211parseelemsfull stores...