Wireshark 1.10.x < 1.10.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.1 advisory. - The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in...

Siemens SIMATIC S7-1500 TM MFP Access of Uninitialized Pointer (CVE-2026-23367)

In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the radiotap namespace not with vendor namespaces, but if the undefined field 18 is used, the alignment/size is unknown as well. In...

PT-2026-117029

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds read in ieee80211 monitor select queue ieee80211 monitor select queue validates the skb length using skb-len before dereferencing pointers into skb-data to access the 802.11 header. However,...

CVE-2026-98329

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When packets are injected on a monitor network interface, mac80211 does not verify whether the bandwidth requested in the radiotap header exceeds the operational channel bandwidth before forwarding it to the driver. A...

SUSE CVE-2026-98329

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

CVE-2026-98329

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

CVE-2026-98329

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

CVE-2026-98329 wifi: mac80211: don't allow injecting frames wider than the chanctx

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

EUVD-2026-93314

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

CVE-2026-98329 wifi: mac80211: don't allow injecting frames wider than the chanctx

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

PT-2026-106658

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 module where frames injected on a monitor interface can include a radiotap field requesting a bandwidth that exceeds the actual operational bandwidth. The...

CVE-2026-98329: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: Radiotap: Reject Radiotap with unknown bits The Radiotap parser is currently only used with the radiotap namespace not with vendor namespaces. However, if the undefined field 18 is used, the alignment/size of the data is al...

PT-2026-98130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the mac80211 wifi component. In Neighbor Awareness Networking NAN, the info-band variable is set to NUM NL80211 BANDS because the transmission ban...

kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap

A flaw was found in the Linux kernel's mac80211 WiFi subsystem. This vulnerability allows an attacker to cause undefined behavior by injecting a specially crafted frame with an invalid radiotap header. This can lead to system instability or a denial of service DoS, potentially causing the system ...

mac80211 Stack Heap Buffer Overflow

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2026-74322

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996macwritetxwi80211 For injected frames e.g. via radiotap, mac80211 can pass info-control.vif = NULL, as explicitly noted in struct ieee80211txinfo. Check vif point...

Linux Kernel DoS

The vulnerability in the ieee80211radiotapiteratornext function within the net/wireless/radiotap.c module of the Linux kernel’s wireless support is related to an undefined behavior dependency for each implementation type. Exploitation of this vulnerability may allow an attacker to cause a denial ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996 – A possible NULL pointer dereferencing has been fixed in mt7996macwritetxwi80211. For injected frames e.g., via Radiotap, mac80211 can set info-control.vif = NULL, as explicitly stated in the struct...

CVE-2026-74648: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame lengths rtwcfg80211monitorifxmitentry removes the radiotap header and then reads the 802.11 frame control field without checking that a base 802.11 header remains. The data path...