8.8

CVE-2026-68471

wifi: ieee80211: validate MLE common info length

In the Linux kernel, the following vulnerability has been resolved:

wifi: ieee80211: validate MLE common info length

ieee80211_mle_common_size() uses the first common-info octet as the
common information length for all known MLE types. However,
ieee80211_mle_size_ok() only validates that octet for Basic, Probe
Request, and TDLS MLEs.

Reconfiguration MLEs also skipped the length octet when calculating the
minimum common size, and Priority Access MLEs skipped validation of the
advertised common information length.

Account for the Reconfiguration common-info length octet and validate
the advertised common information length for all known MLE types. Keep
unknown-type handling unchanged.

[remove now misleading comment]
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0f48b8b88aa9ed7b65d7cb55dbc57ec914ddada1
Version < 90576bd6921a91eb038bffbb4b9467c2dc26aa1d
Status affected
Version 0f48b8b88aa9ed7b65d7cb55dbc57ec914ddada1
Version < 2b1589fd9a076727a73bfb39e96622a76415ad32
Status affected
Version 0f48b8b88aa9ed7b65d7cb55dbc57ec914ddada1
Version < 293baeae9b2434a3e432629d7720b5603db2d77e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.0
Status affected
Version 0
Version < 6.0
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.245
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/90576bd6921a91eb038bffbb4b9467c2dc26aa1d
https://git.kernel.org/stable/c/2b1589fd9a076727a73bfb39e96622a76415ad32
https://git.kernel.org/stable/c/293baeae9b2434a3e432629d7720b5603db2d77e