ROS-20261013-73-0107

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

ROS-20261013-73-0125

The vulnerability of the nl80211parsernrelems function in the net/wireless/nl80211.c module, which supports wireless communication in Linux operating systems, involves unlimited distribution of resources. Exploiting this vulnerability could allow attackers to compromise the confidentiality,...

CVE-2026-98345

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

UBUNTU-CVE-2026-98345

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

CVE-2026-98345 wifi: cfg80211: check IP header size in cfg80211_classify8021d()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211classify8021d A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211classify8021d+0x99d/0x12b0...

CVE-2026-98338 wifi: cfg80211: ibss: ref BSS entry for joined event

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with...

ROS-20261006-73-0251

The vulnerability of the ath10kcefreepipe and ath10kcefreepipe64 functions in the drivers/net/wireless/ath/ath10k/ce.c driver of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to resource management errors. Exploiting this vulnerability can...

ROS-20261006-73-0006

The vulnerability of the function ieee80211radiotapiteratornext in the net/wireless/radiotap.c module, which is part of Linux’s wireless communication support, is related to the dependence on unspecified behavior for each implementation type. Exploiting this vulnerability could allow an attacker ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: The ID of the bound element is read when checking non-inheritance. The cfg80211iselementinherited function reads the first data octet of the candidate element id = elem-data0 in order to look it up in an extension...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability in the net/wireless/mlme.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the cfg80211_sme_connect() function in the net/wireless/sme.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cfg80211smeconnect function in the net/wireless/sme.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...

The vulnerability of the cfg80211_6ghz_power_type_valid() function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the cfg802116ghzpowertypevalid function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, is related to incorrect data validation. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20260120-7326

A vulnerability in the isanalpha2 function net/wireless/reg.c of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002982 advisory. An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsimac80211detach in the file...

CVE-2022-50551: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...

CVE-2023-53460: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtwusbprobe drivers/net/wireless/realtek/rtw88/usb.c:876 rtwusbprobe warn: 'hw' from ieee80211allochw not released on lines: 811 Fix this by modifying return to a goto statement...

Vulnerability of the is_an_alpha2() function (net/wireless/reg.c) in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability of the isanalpha2 function net/wireless/reg.c in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-49503: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The "rxstatus-rskeyix" eventually gets passed to testbit so we need to ensure that it is within the bitmap. drivers/net/wireless/ath/ath9k/common.c:46...

PT-2024-41809

Уязвимость функции ath12k htt print tx selfgen ac stats tlv модуля drivers/net/wireless/ath/ath12k/debugfs htt stats.c - драйвера поддержки адаптеров беспроводной связи Atheros/Qualcomm ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить...