CVE-2026-97517
Linux: wifi: nl80211: reject beacons with bad HE operation
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.16%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6e24f72985782013bf2feb0f0712b2ac9390e909Also 8fe5eb7b68d76b3801409ada7365c67696e7af84, 6c4bb5450b9d9111faaaba581ea45a3a79844e50 and 2 moreCVE List
What fixes it
- 6e24f72985782013bf2feb0f0712b2ac9390e909LinuxCVE List
- 8fe5eb7b68d76b3801409ada7365c67696e7af84LinuxCVE List
- 6c4bb5450b9d9111faaaba581ea45a3a79844e50LinuxCVE List
- 0d635f0b4a634eb599ed13a87ece0b5f129f9900LinuxCVE List
- 8b9a100e1a76c52988b31099b349fd95a58c8768LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject beacons with bad HE operation
The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this.
Text from CVE List
Affected versions 12
- Linuxaffected: 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 before 6e24f72985782013bf2feb0f0712b2ac9390e909CVE List
- Linuxaffected: 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 before 8fe5eb7b68d76b3801409ada7365c67696e7af84CVE List
- Linuxaffected: 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 before 6c4bb5450b9d9111faaaba581ea45a3a79844e50CVE List
- Linuxaffected: 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 before 0d635f0b4a634eb599ed13a87ece0b5f129f9900CVE List
- Linuxaffected: 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 before 8b9a100e1a76c52988b31099b349fd95a58c8768CVE List
- Linuxaffected: 5.7CVE List
- Linuxunaffected: all versions before 5.7CVE List
- Linuxunaffected: 6.1.189 through 6.1.*CVE List
- Linuxunaffected: 6.6.158 through 6.6.*CVE List
- Linuxunaffected: 6.12.111 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2CVE List
References 5
- git.kernel.org/stable/c/6e24f72985782013bf2feb0f0712b2ac9390e909Referencevia CVE List
- git.kernel.org/stable/c/8fe5eb7b68d76b3801409ada7365c67696e7af84Referencevia CVE List
- git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50Referencevia CVE List
- git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900Referencevia CVE List
- git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768Referencevia CVE List