CVE-2026-64255

Summary: CVE-2026-64255 affects the Linux kernel WiFi stack (iwlwifi, MLD). Three BA session handlers compute station IDs with ffs(ba_data->sta_mask) - 1 without ensuring sta_mask is non-zero, causing an out-of-bounds access on fw_id_to_link_sta[] when sta_mask is zero (ffd returns 0, wrapped ...

CVE-2026-64223

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211tidtolinkmapsizeok validates negotiated TTLM elements against the number of link-map entries indicated by linkmappresence. ieee80211parsenegttlm must consume the...

Wireless Network Manager Privilege Escalation

The vulnerability of the Wireless Network Manager WNM for Windows operating systems relates to competitive access to resources i.e., a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath12kdprxhnullqdesc function in the drivers/net/wireless/ath/ath12k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker t...

fluxion v6.31

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

CVE-2026-63866

A flaw was found in the Linux kernel's mt76 Wi-Fi driver for mt7996 devices. This vulnerability occurs when the mt7996macstadeinitlink routine fails to properly clear a Wireless Client ID WCID pointer when removing a station link. This improper handling of the WCID pointer may lead to a resource...

SUSE CVE-2026-64176

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...

CVE-2026-64155

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability is caused by improper error handling in certain Wireless Management Interface WMI Wake-on-Wireless WOW calls. Specifically, the ath11kwmicmdsend function did not properly free socket buffers skb in error paths, leading...

Fluxion 6.31

Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social engineering phishing attack. It's compatible wi...

wifi: rtw88: usb: fix memory leaks on USB write failures

...

Linux Distros Unpatched Vulnerability : CVE-2026-64174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: advance loop vars in cfg80211mergeprofile cfg80211mergeprofile reassembles a Multi-BSSID non-transmitted BSS profile that has been split across...

TP-Link-TL-WR841ND-Security-Audit

...

SUSE CVE-2026-63821

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM, the completion callback is never executed. Currently, the driver...

CVE-2026-64179

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipcimeminit The memory allocated in ipcprotocolinit is not freed on the error paths that follow in ipcimeminit. Fix that by calling the corresponding release function ipcprotocoldein...

CVE-2026-64174

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211mergeprofile cfg80211mergeprofile reassembles a Multi-BSSID non-transmitted BSS profile that has been split across multiple consecutive MBSSID elements. Its while-loop calls...

CVE-2026-64117

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate before mesh reuses skb-cb ieee80211invokefastrx reads RX status through IEEE80211SKBRXCBskb, which aliases the same skb-cb storage that ieee80211rxmeshdata reuses as IEEE80211TXINFO. In the...

CVE-2026-64179

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipcimeminit The memory allocated in ipcprotocolinit is not freed on the error paths that follow in ipcimeminit. Fix that by calling the corresponding release function ipcprotocoldein...

CVE-2026-64175 wifi: iwlwifi: mld: stop TX during firmware restart

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes e.g., NMIINTERRUPTUNKNOWN on Intel BE201/Wi-Fi 7, iwlmldnicerror sets mld-fwstatus.inhwrestart to true. However, iwlmldtxfromtxq does not check thi...

CVE-2026-64176 wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...

EUVD-2026-45861

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...