CVE-2026-97511
Linux: wifi: mac80211: avoid out-of-bounds access in monitor
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7f087f70e020b16a5b967332ee6e937817eaa173Also 03c41203ee5a833a9d7a7630be190830cede29d8CVE List
What fixes it
- 7f087f70e020b16a5b967332ee6e937817eaa173LinuxCVE List
- 03c41203ee5a833a9d7a7630be190830cede29d8LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: avoid out-of-bounds access in monitor
In NAN, we don't know on what band the frame will be sent. Therefore we set info->band to NUM_NL80211_BANDS. However, this leads to out-of-bound access in ieee80211_add_tx_radiotap_header when we try to access the sbands array.
Fix it by not accessing the array if the band is NUM_NL80211_BANDS. This means that we will not report rate info for legacy rate in NAN. But nobody really cares about it.
Text from CVE List
Affected versions 6
- Linuxaffected: fc41f4a28ac4d462487903229494eeb266f68a40 before 7f087f70e020b16a5b967332ee6e937817eaa173CVE List
- Linuxaffected: fc41f4a28ac4d462487903229494eeb266f68a40 before 03c41203ee5a833a9d7a7630be190830cede29d8CVE List
- Linuxaffected: 6.18CVE List
- Linuxunaffected: all versions before 6.18CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2CVE List