kernel: wifi: mac80211: defer link RX stats percpu free to RCU

A flaw was found in the mac80211 Wi-Fi driver of the Linux kernel. When an MLO Multi-Link Operation link is removed, the RX statistics per-CPU buffer is freed immediately, while the link container is deferred to RCU Read-Copy-Update. This timing issue can lead to a use-after-free vulnerability,...

kernel: wifi: mac80211: defer link RX stats percpu free to RCU

A flaw was found in the mac80211 Wi-Fi driver of the Linux kernel. When an MLO Multi-Link Operation link is removed, the RX statistics per-CPU buffer is freed immediately, while the link container is deferred to RCU Read-Copy-Update. This timing issue can lead to a use-after-free vulnerability,...

kernel: wifi: mac80211: defer link RX stats percpu free to RCU

A flaw was found in the mac80211 Wi-Fi driver of the Linux kernel. When an MLO Multi-Link Operation link is removed, the RX statistics per-CPU buffer is freed immediately, while the link container is deferred to RCU Read-Copy-Update. This timing issue can lead to a use-after-free vulnerability,...

CVE-2026-85816

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

CVE-2026-83703

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-83703

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an unauthorized attacker to trigger a denial of service (DoS) on the affected system from an adjacent network . While the CVSS 3.1 score indicates a Medium severity (6.5), it highlights a high impact on avai...

CVE-2026-85816

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an authorized attacker to disclose information over an adjacent network . No specific software versions, file paths, or remediation steps are provided in the documentation; however, an official fix is indica...

Windows Wi-Fi Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

Windows Wi-Fi Driver Denial of Service Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

Microsoft Windows: CVE-2026-85816: Windows Wi-Fi Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-98186

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...

CVE-2026-98191

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. When configuring a wireless regulatory domain fails, the driver does not release an acquired runtime Power Management PM reference. A local user could exploit this flaw during device configuration failures to cause a reference count leak...

CVE-2026-98187

A flaw was found in the Linux kernel's p54 Wi-Fi driver. The driver fails to verify that an entire interface record fits within the buffer boundaries when parsing EEPROM Electrically Erasable Programmable Read-Only Memory data. An attacker capable of attaching a crafted wireless device or supplyi...

CVE-2026-98192

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability can lead to a Denial of Service DoS or system instability due to a use-after-free condition. When deinitializing the transmission acknowledgement timer during device removal, the driver stops the timer without waiting...

CVE-2026-90361

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. During the ath11kservicereadyextevent processing, a memory allocation for svcrdyext.macphycaps is not released if an error occurs during TLV Type-Length-Value parsing. This can lead to a memory leak, potentially causing resource exhausti...

CVE-2026-97500

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. The driver fails to validate the length of physical layer PHY status information elements before parsing received data. A malicious or malfunctioning wireless device could exploit this flaw by providing status data with an...

CVE-2026-98159

A flaw was found in the Linux kernel's MediaTek MT7921 Wi-Fi driver. The driver fails to validate the region count and record lengths when parsing Country Location Control CLC firmware data. An attacker capable of supplying a malformed firmware image could trigger an out-of-bounds memory access o...

CVE-2026-93807

A flaw was found in the Linux kernel's Redpine Signals RSI Wi-Fi driver. An attacker can trigger a Denial of Service DoS or information disclosure by configuring wireless encryption keys for ciphers with shorter key lengths than the Temporal Key Integrity Protocol TKIP. The driver unconditionally...