Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data byte of the candidate element id = elem-data0 to look it up in an extension non-inheritance list. It does so afte...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: do not dereference hifdev after re-arming firmware request ath9khifrequestfirmware re-arms an asynchronous firmware load via requestfirmwarenowait, passing hifdev as the completion context, and then still...

Linux rsi_shutdown() DoS

The vulnerability in the rsishutdown function within the drivers/net/wireless/rsi/rsi91xsdio.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the cfg80211leaveocb function within the net/wireless/ocb.c component of the Linux kernel operating system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: The ath5k driver seems to perform an array-index-out-of-bounds access, as indicated by the UBSAN kernel message: UBSAN: array-index-out-of-bounds in...

Linux kernel wcn36xx_smd_trigger_ba_rsp Buffer Overflow

The vulnerability of the wcn36xxsmdtriggerbarsp function in the drivers/net/wireless/ath/wcn36xx/smd.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

ROS-20261013-73-0107

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

ROS-20261013-73-0125

The vulnerability of the nl80211parsernrelems function in the net/wireless/nl80211.c module, which supports wireless communication in Linux operating systems, involves unlimited distribution of resources. Exploiting this vulnerability could allow attackers to compromise the confidentiality,...

ROS-20261008-73-0040

The vulnerability in the drivers/net/wireless/virtual/virtwifi.c module of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0069

The vulnerability of the cfg80211pmsrwdevdown function in the net/wireless/pmsr.c module, which supports wireless communication in Linux kernel, is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-98345

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

UBUNTU-CVE-2026-98345

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

CVE-2026-98345 wifi: cfg80211: check IP header size in cfg80211_classify8021d()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

CVE-2026-98338 wifi: cfg80211: ibss: ref BSS entry for joined event

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with...

ROS-20261006-73-0006

The vulnerability of the function ieee80211radiotapiteratornext in the net/wireless/radiotap.c module, which is part of Linux’s wireless communication support, is related to the dependence on unspecified behavior for each implementation type. Exploiting this vulnerability could allow an attacker ...

ROS-20261006-73-0251

The vulnerability of the ath10kcefreepipe and ath10kcefreepipe64 functions in the drivers/net/wireless/ath/ath10k/ce.c driver of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to resource management errors. Exploiting this vulnerability can...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

Linux kernel MLME DoS

The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...

Linux cfg80211_sme_connect() DoS

The vulnerability of the cfg80211smeconnect function in the net/wireless/sme.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...