PT-2026-8147 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23152

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the mac80211 module related to the handling of TID-To-Link Mapping (TTLM) elements. Specifically, the parsing of TTLM elements with a default link map is flawed, leading to an out-of-bounds read when processing frames. Access points should not explicitly report a TTLM with a default mapping, as the default mapping is implied when the element is absent. However, the mac80211 module incorrectly parses the frame and attempts to read beyond the element's boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23152

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

Affected Products

Linux Kernel

Mac80211

References · 1569

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23152.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23152 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-23152 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23152 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20720-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23152 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20416-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23152 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20931-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23152 · Vendor Advisory
• https://git.kernel.org/stable/c/1eab33aa63c993685dd341e03bd5b267dd7403fa · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20838-1 · Vendor Advisory