PT-2026-61491 · Linux · Linux Kernel
CVE-2026-64174
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the
cfg80211 merge profile() function, which is responsible for reassembling Multi-BSSID non-transmitted BSS profiles split across multiple MBSSID elements. The function utilizes a while-loop that calls cfg80211 get profile continuation(ie, ielen, mbssid elem, sub elem) but fails to advance the mbssid elem and sub elem variables within the loop body. Consequently, each iteration repeatedly processes the same continuation, copying the same data into the merged ie buffer at an increasing offset until the buffer is full. A specially-crafted malicious beacon can exploit this behavior to force the kernel to spend an excessive amount of time processing the request, potentially leading to a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel