CVE-2026-98335 wifi: mac80211: abort chanswitch when leaving a mesh

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitch when leaving a mesh The code in ieee80211stopmesh leaves CSA active, but leaving the mesh released the channel context, so the CSA finalize work crashes: Oops: general protection fault, probably f...

CVE-2026-98335 wifi: mac80211: abort chanswitch when leaving a mesh

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitch when leaving a mesh The code in ieee80211stopmesh leaves CSA active, but leaving the mesh released the channel context, so the CSA finalize work crashes: Oops: general protection fault, probably f...

CVE-2026-98327 wifi: mac80211: mesh: reset the CSA state when leaving

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: reset the CSA state when leaving ifmsh-csa is allocated in ieee80211meshcsabeacon and only freed in ieee80211meshfinishcsa, i.e. when the channel switch completes. Leaving the mesh while a switch is still...

Linux Distros Unpatched Vulnerability : CVE-2026-98327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: mesh: reset the CSA state when leaving ifmsh-csa is allocated in ieee80211meshcsabeacon and only freed in ieee80211meshfinishcsa, i.e. when the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not finalize the CSA in IBSS mode if the state is disconnected. When we are not connected to a channel, sending the “switch” announcement doesn’t make any sense. The BSS list is empty in that case. This causes...

CVE-2026-90407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability arises from insufficient validation of firmware input, specifically the numvdevs field, which is used as a loop bound without proper size checks. An attacker could exploit this to trigger an out-of-bounds read,...

CVE-2026-90367

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: hold dev-mt76.mutex while disabling tx worker in SER mt7996macresetwork parked the tx worker and disabled the RX/TX NAPIs before taking dev-mt76.mutex. mt76workerdisable/enable are plain kthread park/unpark, n...

CVE-2026-90381: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix handling channel context with different bands in mt76switchvifchanctx When performing channel switches on different radios within a short timeframe, channel contexts with different bands can be carried for each...

PT-2026-94692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where the parsing of Channel Switch Announcement CSA erroneously treats channel zero as if no information were present. This causes the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: A NULL pointer dereference occurred in meshrxcsaframe. In meshrxcsaframe, elems-meshchanswparamsie was dereferenced at lines 1638 and 1642, without a prior NULL check: c ifmsh-chswttl =...

CVE-2026-24077

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-24077

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-24077 Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

EUVD-2026-52730

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-24077

CVE-2026-24077 is described as an Information Disclosure vulnerability in Qualcomm WLAN Host related to processing wireless network channel switch information with improperly formatted length fields. The connected records (CVE-List and CVE enrichment) reference this as an Integer Underflow in the...

CVE-2026-24077: Integer Underflow (Wrap or Wraparound)

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

PT-2026-67735

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An information disclosure occurs when the system processes wireless network channel switch information containing improperly formatted length fields...

CVE-2026-64325

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, affecting mt7921 and mt7925 chipsets. When a channel-switch announcement CSA beacon is received, a timing issue can occur if a station disconnects before a queued work item processes the beacon. This can lead to a NULL pointer dereference ...

SUSE CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

UBUNTU-CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...