Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-46152

wifi: mac80211: drop stray 'static' from fast-RX rx_result

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3468e1e0c639032a603450f0830ccabfa76f5806 to < 03584528bfffb195e384698af9148b94e42e3f14affected
  • 3468e1e0c639032a603450f0830ccabfa76f5806 to < 1739fc31b4de06c5c78ce0741182770fb079091eaffected
  • 3468e1e0c639032a603450f0830ccabfa76f5806 to < e131562d6f2b958148c35c98831b007f47f0e3d3affected
  • 3468e1e0c639032a603450f0830ccabfa76f5806 to < 3ef44f96ccc3e06e059dec57842e366f0c4b1893affected
  • 3468e1e0c639032a603450f0830ccabfa76f5806 to < 7a5b81e0c87a075afd572f659d8eb68c9c4cd2baaffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References