Linux Distros Unpatched Vulnerability : CVE-2026-64506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix...

UBUNTU-CVE-2026-64255

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checking that stamask is non-zero. When stamask is zero, ffs returns 0 and...

CVE-2026-64255 wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checking that stamask is non-zero. When stamask is zero, ffs returns 0 and...

PT-2026-64327

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi module where a pointer is dereferenced before a NULL check is performed. Specifically, within the iwl mld remove link function, the fw id from the link...

SUSE CVE-2026-64155

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11kwmicmdsend.... Because we did not check the return value, we also did not free the skb in the error...

CVE-2026-64155

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability is caused by improper error handling in certain Wireless Management Interface WMI Wake-on-Wireless WOW calls. Specifically, the ath11kwmicmdsend function did not properly free socket buffers skb in error paths, leading...

CVE-2026-63832

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs due to improper handling of Wi-Fi station additions, where the driver fails to adequately verify existing client connections. A remote attacker could exploit this by manipulating Wi-Fi authentication processes,...

Linux Distros Unpatched Vulnerability : CVE-2026-63866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing...

CVE-2026-64176

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...

EUVD-2026-45861

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...

CVE-2026-64176

The CVE-2026-64176 entry documents a Linux kernel issue in wifi: iwlwifi/mvm where TX rate handling for old devices (e.g., 7265D) used outdated v1 rate encoding. The driver initially shifted to v3 rates, then reverted due to beacon-rate beaconing failures, which could cause TX_CMD rate misreporti...

CVE-2026-64176 wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...

EUVD-2026-45550

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...

EUVD-2026-45488

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp-txringi.txstatus are released. However this is released again when the device is unbinded ath11kpci, and...

EUVD-2026-45487

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM, the completion callback is never executed. Currently, the driver...

PT-2026-61492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the iwl mld tx from txq function fails to check the mld-fw status.in hw restart flag before dequeuing frames from mac80211 and pushing them to...

PT-2026-61138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the ath11k WiFi driver. When a firmware-related initialization error occurs, the buffers dp-tx ringi.tx status are released. These same buffers are released...

PT-2026-61354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the MLD Multi-Link Device component. When AMSDU Aggregate MAC Service Data Unit is disabled for a Traffic Identifier TID, the driver sets the...

PT-2026-61137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 USB driver, memory leaks occur when the rtw usb write port function fails to submit a USB Request Block URB, such as during device disconnects or memory pressure ENOMEM...

PT-2026-61148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel wifi mt76 driver where the mt76 sta add function fails to check if a wireless client identifier WCID has already been published. When using mt7925, th...