Firmware Crash in Linux Kernel's WiFi Component for Mediatek's AP Interface

CVE-2026-53317

What is CVE-2026-53317?

A vulnerability has been identified in the Linux kernel related to the Mediatek WiFi driver, where certain configurations of station AIDs can lead to a firmware crash. This issue specifically arises when the station AID exceeds 20, particularly in modified environments where hostapd is configured to start allocation at values like 65. The stock hostapd limits station AIDs to a range that prevents such crashes. This vulnerability has been addressed to ensure that oversized AIDs do not compromise system stability, particularly for AP interfaces, while maintaining normal operations for station interfaces.

References