Linux Kernel Vulnerability in Mac80211 Affecting Multi-Link Element Handling

CVE-2026-64515

What is CVE-2026-64515?

A vulnerability in the Linux kernel's handling of multi-link elements (MLE) within the mac80211 subsystem has been identified. The issue arises when the defragmentation routine is invoked with a pointer referencing a defragmented copy while utilizing original, untransmitted profile elements. This results in potential discrepancies, as the original frame may contain data that is unreachable, leading to parsing errors or even potential heap overflows if the original frame is located at a higher memory address. A fix has been implemented to accurately track the container alongside the pointer, which also consolidates two previously similar defragmentation routines for improved efficiency and security.

References