CVE-2026-98709

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...

IoT-PT-v1

🛠️ IoT-PT OS v1 Internet of Things Penetration Testing OS - Version 1 📦 What is IoT-PT OS v1? IoT-PT OS v1 is a penetration testing virtual machine designed specifically for IoT security assessments. It includes pre-configured tools, scripts, and environments tailored for firmware analysis,...

Location-Of-Interest Vs. Current-Location Privacy in Multi-Hop Communication

Consider a standard multi-hop wireless radio network in which nodes relay messages for one another. While the contents of messages may be sensitive and thus encrypted, the very fact that two radios communicated can leak sensitive information about both the physical location of the origin and the...

CVE-2026-93124

A flaw was found in the Linux kernel's asus-wireless driver. When the driver is force-bound to a device lacking an ACPI Advanced Configuration and Power Interface companion object, it can lead to a NULL pointer dereference. This occurs because the asuswirelessprobe function incorrectly stores a...

CVE-2026-98711

A flaw was found in the Linux kernel's cw1200 wireless network driver. During data transmission, the driver pads transfer sizes to meet hardware alignment requirements without reserving sufficient space in the frame buffer. This causes the driver to read beyond the buffer boundaries and transmit...

CVE-2026-98702

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A nearby wireless attacker can cause a Denial of Service DoS by sending a crafted Channel Switch Announcement CSA frame with an unsupported bandwidth configuration. Because the kernel fails to reject this channel definition, it...

wifisting

wifisting A GTK4 wireless security toolkit for Linux. 57 modules covering Wi-Fi, Bluetooth, RF, router-side and network MITM work behind one interface. Every module is a standalone shell script. The GUI is a view over them, not a container — nothing is locked behind the interface. Early...

kernel: Fix of 42 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

CVE-2026-98406

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can trigger a denial of service DoS condition by issuing a wireless bitrate configuration request while a network interface is undergoing initialization or teardown. Because the subsystem fails to verify that the...

CVE-2026-98407

A flaw was found in the Linux kernel's Redpine Signals Inc. rsi wireless driver. An incorrect memory offset calculation during encryption key removal causes data to be written past the allocated buffer, corrupting kernel heap memory. This issue is triggered during routine wireless events such as...

KisMac2

PLEASE NOTE, THIS PROJECT IS NO LONGER BEING MAINTAINED KisMac2 KisMAC is a free, open source wireless stumbling and security tool for Mac OS X. Issue tracking: Going forward, please use the tracker here on GitHub. The Trac for the original KisMac is at http://trac.kismac-ng.org Whats new: Mac OS...

CVE-2026-0073

🔓 CVE-2026-0073: Android adbd Authentication Bypass Weaponized Proof of Concept for the Wireless ADB TLS Auth Bypass vulnerability. Discovered by Barghest, Weaponized PoC by devtint. 📋 Overview CVE-2026-0073 is a critical cryptographic logic failure in the Android Debug Bridge daemon adbd that...

CVE-2026-111215

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...

EUVD-2026-102327

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the check for the rx payload length fails, or if kmemdup fails, we still need to free the command response. Fix that...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd in iwlmvmmacwaketxqueue After a successful station association, if the station queues are disabled for some reason, the related lists are not emptied. Therefore, if a new element is added to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fixed node corruption in the “ar-arvifs” list In the current WLAN recovery code flow, ath11kcorehalt only re initializes the “arvifs” list head. This causes the list node immediately following the list head to becom...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cfg80211: Fixing management registration locking issues The issue with management registration locking was fixed. The list was locked for each wdev, but the cfg80211mgmtregistrationsupdate function iterated over it without holdin...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192u: Fixed a deadlock in ieee80211beaconsstop. There is a deadlock in ieee80211beaconsstop, as shown below: Thread 1 | Thread 2 | ieee80211sendbeacon ieee80211beaconsstop | modtimer spinlockirqsave //1 | Wa...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: The ID of the bound element is read when checking non-inheritance. The cfg80211iselementinherited function reads the first data octet of the candidate element id = elem-data0 in order to look it up in an extension...