Linux Kernel Vulnerability in Wi-Fi Parsing Affects Networking Functionality

CVE-2026-64223

What is CVE-2026-64223?

A vulnerability in the Linux kernel's mac80211 module related to Wi-Fi networking can potentially lead to out-of-bounds reads during the parsing of negotiated TTLM maps. Specifically, the function ieee80211_tid_to_link_map_size_ok() mismanages the cursor advancements when processing TIDs, which could cause the parser to access memory beyond validated entries. This improper validation may lead to abnormal behavior or security flaws within networking functionalities. The issue emphasizes the need for meticulous management of TID presence bits during parsing to prevent overstepping into unallocated memory.

References