kernel: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

A flaw was found in the Linux kernel's iwlwifi MLD driver. When the Aggregated MAC Service Data Unit AMSDU feature is disabled, the driver incorrectly processes Transmit Segmentation Offload TSO requests. This can lead to a flood of micro-frames on the transmit ring, resulting in memory corruptio...

Linux Distros Unpatched Vulnerability : CVE-2026-64037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC...

CVE-2026-64037

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables AMSDU for a TID, the MLD driver sets maxtidamsdulen to the sentinel value 1. The TSO segmentation path in...

CVE-2026-64037

Concrete details found: CVE-2026-64037 affects the Linux kernel’s wifi: iwlwifi: mld path. When AMSDU is disabled, max_tid_amsdu_len can be 1 (sentinel) and the code checks for zero but not for this sentinel, causing num_subframes to compute to 0 and gso_size to be 0. This triggers skb_gso_segmen...

CVE-2026-64037 wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables AMSDU for a TID, the MLD driver sets maxtidamsdulen to the sentinel value 1. The TSO segmentation path in...

CVE-2026-64037

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables AMSDU for a TID, the MLD driver sets maxtidamsdulen to the sentinel value 1. The TSO segmentation path in...

PT-2026-61354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the MLD Multi-Link Device component. When AMSDU Aggregate MAC Service Data Unit is disabled for a Traffic Identifier TID, the driver sets the...