PT-2026-6143 · Rsi911X+3 · Rsi911X+3
Published
2026-01-01
·
Updated
2026-05-26
·
CVE-2026-23073
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory corruption issue exists in the Linux kernel related to WiFi drivers. Specifically, the RSI911x driver does not correctly set the size of the vif driver data within the
ieee80211 vif structure. This leads to out-of-bounds access and potential memory corruption when the driver attempts to store its vif priv data structure. The issue can be triggered by bringing the wlan0 interface up and down in quick succession. A write operation to vif->drv priv corrupts the new flows member of the fq tin structure, potentially leading to a crash when accessing a bogus address in the fq tin reset() function. The vulnerable function is rsi mac80211 add interface().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Rsi911X
Ubuntu