Linux Kernel Vulnerability in Wi-Fi Management Affects Mac80211 Functionality

CVE-2026-43052

What is CVE-2026-43052?

A vulnerability in the Linux kernel's Wi-Fi management, specifically within the mac80211 subsystem, allows for improper handling of TDLS (Tunneled Direct Link Setup) functionalities. When the NL80211_TDLS_ENABLE_LINK function is invoked, it fails to verify whether the specified station is indeed a TDLS peer. This oversight can trigger unintended consequences, such as changes in channel context and HT (High Throughput) protection, before a proper failure response is executed. A critical improvement adds a check for the TDLS status of the station before executing the ENABLE_LINK operation, thus preventing improper interactions with non-TDLS stations.

References