Out-of-Bounds Access Vulnerability in Linux Kernel Affecting Wi-Fi Features

CVE-2026-97511

What is CVE-2026-97511?

A vulnerability in the Linux kernel's Wi-Fi subsystem could potentially allow out-of-bounds access when handling frames in Neighbor Awareness Networking (NAN). This occurs because the system erroneously sets the operating band to NUM_NL80211_BANDS, leading to attempts to access an invalid array index during the transmission of radiotap headers. As a result, this may compromise the stability and security of network communications. The issue has been addressed by preventing access to the sbands array when the band is set to NUM_NL80211_BANDS, although it means that rate information for legacy rates in NAN will no longer be reported.

References