Malformed AMPDU Frame Handling Issue in Linux Kernel Affecting WiFi Connectivity

CVE-2026-64506

What is CVE-2026-64506?

A vulnerability in the Linux kernel affects WiFi connectivity by mishandling malformed AMPDU frames. During high traffic, particularly when a rekey process is underway, the initial AMPDU packet with certain sequence numbers may be dropped unexpectedly. This leads to potential disconnection from the Access Point (AP). The flaw stems from incorrect drop logic that fails to account for this specific scenario. A recent fix has been implemented, which includes initial state judgement to ensure that the status is reset only during a pairwise rekey operation.

References