PT-2026-28329 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23396

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the mac80211 component, specifically in the mesh matches local() function. This function unconditionally dereferences ie->mesh config to compare mesh configuration parameters. When called from mesh rx csa frame(), the parsed action-frame elements may lack a Mesh Configuration IE, resulting in a kernel NULL pointer dereference. An attacker in close proximity can exploit this by sending a specially crafted CSA action frame that includes a valid Mesh ID IE but omits the Mesh Configuration IE, leading to a kernel crash. The function mesh matches local() is vulnerable. The ie->mesh config variable is dereferenced without proper checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-23396

ECHO-6739-50DA-B60F

Affected Products

Linux Kernel

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23396.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23396 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23396 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23396 · Vendor Advisory
• https://git.kernel.org/stable/c/0a4da176ae4b4e075a19c00d3e269cfd5e05a813 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23396 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23396 · Vendor Advisory
• https://git.kernel.org/stable/c/44699c6cdfce80a0f296b54ae9314461e3e41b3d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23396 · Vendor Advisory
• https://git.kernel.org/stable/c/a90279e7f7ea0b7e923a1c5ebee9a6b78b6d1004 · Patch
• https://ubuntu.com/security/CVE-2026-23396 · Vendor Advisory
• https://git.kernel.org/stable/c/14a4fd13657a3f2489db6566f081adfb27a49c64 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23396 · Security Note
• https://git.kernel.org/stable/c/7c55a3deaf7eaaafa2546f8de7fed19382a0a116 · Patch
• https://git.kernel.org/stable/c/c1e3f2416fb27c816ce96d747d3e784e31f4d95c · Patch