8.8
Élevée
CVE-2026-46152 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX…
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 7.1 | premières → < 7.1 | 7.1 |
| Linux 7.0 | premières → < 7.0.7 | 7.0.7 |
| Linux 6.18 | premières → < 6.18.30 | 6.18.30 |
| Linux 6.12 | premières → < 6.12.88 | 6.12.88 |
| Linux 6.6 | premières → < 6.6.140 | 6.6.140 |
| Linux | 6.4 | Pas de correctif indiqué |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions non publiées | |
| Red Hat Enterprise Linux BaseOS (v. 10) | Versions non publiées |
Afficher les 28 autres branches Masquer les 28 autres branches
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée