PT-2026-44275 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46152

Mitre

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: drop stray 'static' from fast-RX rx result

ieee80211 invoke fast rx() is documented as safe for parallel RX, but its per-invocation rx result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211 rx mesh data() and the switch on res.

That can make a packet that was queued or consumed by ieee80211 rx mesh data() fall through into ieee80211 rx 8023(), or make a packet that should continue return as queued.

Make res an automatic variable so each invocation keeps its own result.

Fix

Related Identifiers

CVE-2026-46152

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46152 · Security Note
• https://git.kernel.org/stable/c/e131562d6f2b958148c35c98831b007f47f0e3d3 · Note
• https://git.kernel.org/stable/c/1739fc31b4de06c5c78ce0741182770fb079091e · Note
• https://git.kernel.org/stable/c/03584528bfffb195e384698af9148b94e42e3f14 · Note
• https://git.kernel.org/stable/c/7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba · Note
• https://git.kernel.org/stable/c/3ef44f96ccc3e06e059dec57842e366f0c4b1893 · Note