CVE-2025-59609

The CVE-2025-59609 issue is a disclosure vulnerability affecting how advertisement frames are processed when MBSSID elements are malformed or too short. The root cause is in the processing path that handles MBSSID elements, which may allow information exposure. The CVSS 3.1 vector indicates netwo...

CVE-2023-53570

CVE-2023-53570 is a Linux kernel local-privilege issue in the wireless stack. The vulnerability arises from nl80211_parse_mbssid_elems() using an unsigned 8-bit counter (num_elems) to track MBSSID elements, which can overflow when a userspace nl80211 attribute specifies 256 or more elements. This...

PT-2022-35587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential security issue exists in the wifi cfg80211/mac80211 component, where bad MBSSID elements are not properly rejected. The actual impact and attack plausibility of this issue have...