airtop

airtop htop for the airwaves — a live 802.11 Wi-Fi RF dashboard in your terminal. airtop turns the Wi-Fi traffic around you into a live terminal dashboard — a frequency spectrum of nearby access points, per-station signal traces, a frame-type activity feed, an RSSI histogram, and a rolling list o...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactoring of CSA parsing erroneously equates channel zero with no information present, causing it to ignore a CSA on an AP that advertizes a switch to that invalid channel. Thi...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces receive cryptotxtailroomneededcnt from the AP interface; however, this value is never decremented again unless the AP is also brought down...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211joinmesh acquires a channel context and then calls ieee80211startmesh, which can fail. In that case, the chanctx isn’t released; then interface removal attempts to...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not call ieee80211handlereconfigfailure when not needed When the NAN reconfiguration fails, we call ieee80211handlereconfigfailure, which marks all interfaces as not present in the driver. Then, at the error pa...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect When leaving an IBSS in ieee80211ibssdisconnect, mac80211 flushes stations, turns the carrier off, and immediately tells the driver to leave as well. Although there might ...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsipreparebeacon copies the mac80211 beacon frame after FRAMEDESCSZ into a management skb whose usable tailroom may be smaller than MAXMGMTPKTSIZE after alignment. Valida...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211registerhw If kmemdup fails while copying supported band structures, the error path jumps to failrate. This skips ratecontroldeinitialize and leaks the initialized local-ratectrl. This...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...

Astra Linux - Vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: The reset state when starting an AP fails ieee80211startap can set enablebeacon and beaconint and fail later, leaving it set permanently. Scanning may then attempt to restore beaconing on such an interface, leadin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bound S1G TIM PVB walk to the TIM element The ieee80211s1gchecktim function parses the S1G Partial Virtual Bitmap PVB of a received TIM element. The TIM is passed as the element’s payload. The...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in setbitratemask when sdata not in driver ieee80211setbitratemask checks whether the interface is running via ieee80211sdatarunning, but it does not verify whether the interface still exists within the...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links, it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set up the TX info early to fix failure paths The previous commit 2c51457d930f “wifi: mac80211: free ack status frame on TX header build failure” cleaned up the leak, but still left the code a bit messy and the...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive When associating with a non-transmitted MBSSID profile, memory previously freed is read during the determination of the operating channel and the application of HT...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrelht: validate fixed rate index The fixedrateidx debugfs file is a plain u32 attribute, so any value can be written to it. minstrelhtupdatestats then copies the value into mi-maxtprate and mi-maxprobrate, an...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211rxmgmtdeauth reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length...

K000164047: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46152 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rxresult ieee80211invokefastrx is documented as safe for parallel RX, but its per-invocation rxresult is declared static. Concurrent...

CVE-2026-98891

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker within wireless network range can trigger a Denial of Service DoS by sending a malformed or truncated deauthentication frame. The subsystem accesses the frame's reason code before verifying that th...