PT-2026-44275 · Linux+2 · Linux Kernel+2
CVE-2026-46152
·
Published
2026-05-28
·
Updated
2026-07-28
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description
A race condition exists in the
ieee80211 invoke fast rx() function within the mac80211 wireless driver. The rx result variable was incorrectly declared as static, causing concurrent callers to share a single instance. This allows one process to overwrite the result of another between the execution of ieee80211 rx mesh data() and the subsequent switch operation on the result. Consequently, packets may be incorrectly routed, such as a packet queued by ieee80211 rx mesh data() falling through to ieee80211 rx 8023(), or a packet that should proceed being incorrectly marked as queued.Recommendations
For Linux kernel, make the
res variable an automatic variable to ensure each invocation maintains its own result.
Update openSUSE Tumbleweed to kernel-devel-7.0.11-1.1.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Rocky Linux
Opensuse Tumbleweed