Linux kernel cfg80211_merge_profile Heap Buffer Overflow DoS

The vulnerability in the cfg80211mergeprofile function within the net/wireless/scan.c module of the Linux kernel wireless communication stack is related to an infinite loop that occurs when the exit condition is never met. Exploitation of this vulnerability could allow an attacker to compromise t...

Linux Wireless DoS

The vulnerability of the cfg80211scan function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with improper memory release „memory leak“. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Atheros Qualcomm Wireless Driver Buffer Overflow

The vulnerability of the ar5523cmd function in the drivers/net/wireless/ath/ar5523/ar5523.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

Texas Instruments Wireless Driver DoS

The vulnerability in the wl1271opresume function within the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless driver for Linux kernel is related to synchronization errors occurring when a shared resource is utilized. Exploitation of this vulnerability may enable an...

EUVD-2026-55600

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without checking that the skb actually holds that many bytes. Commit...

wifi: nl80211: reject oversized EMA RNR lists

...

Linux Wireless DoS

The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Wireless DoS

The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

...

ath12k_htt_print_tx_selfgen_ac_stats_tlv Heap Buffer Overflow DoS

Vulnerability of the ath12khttprinttxselfgenacstatstlv function in the drivers/net/wireless/ath/ath12k/debugfshttstats.c module – The Linux operating system’s Atheros/Qualcomm wireless adapter support driver relies on buffer overflow attacks. Exploiting this vulnerability can allow attackers to...

Linux Atheros Wireless Driver Use-After-Free

The vulnerability of the ath9khtcprobedevice function in the drivers/net/wireless/ath/ath9k/htcdrvinit.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory due to incorrect initialization. Exploiting this...

Marvell wireless driver Heap Buffer Overflow DoS

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

ath11k_spectral_scan_config() Function DoS

The vulnerability of the ath11kspectralscanconfig function in the drivers/net/wireless/ath/ath11k/spectral.c module – the driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a...

Linux Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath11kdprxmondeliver function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath10kcorestartrecovery function in the drivers/net/wireless/ath/ath10k/core.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an...

PT-2026-1324

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Description An improper handling of the NL80211 vendor command results in a buffer overflow whe...

CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...

Intel wireless driver Heap Buffer Overflow DoS

The vulnerability of the iwlmvmmacremoveinterface function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module of the Linux operating system’s wireless adapter driver leads to the failure to release resources after their useful life has ended. Exploiting this vulnerability can allow a...

mt7915_getPhyMode Heap Buffer Overflow DoS

The vulnerability of the mt7915getPhyMode function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the wireless adapter support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...