CVE-2026-46152

Linux · Kernel

A race condition in the Linux kernel's mac80211 fast-RX handling can lead to packet processing errors.

Executive summary

A high-severity concurrency issue in the Linux kernel's wireless subsystem can lead to incorrect packet processing and potential denial of service.

Vulnerability

A static variable rx_result in ieee80211_invoke_fast_rx() is accessed concurrently, allowing callers to overwrite each other's results during parallel RX operations.

Business impact

This flaw can result in the incorrect processing of Wi-Fi packets, potentially leading to unstable network performance or denial of service. With a CVSS score of 8.8, this vulnerability poses a risk to the reliability of wireless communication.

Remediation

Immediate Action: Apply the kernel patch that converts rx_result to an automatic variable, ensuring each invocation maintains its own result.

Proactive Monitoring: Monitor wireless performance metrics and system logs for packet processing errors or driver-related errors.

Compensating Controls: If patching is unavailable, implement network-level monitoring to detect and alert on anomalous packet loss or wireless instability.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Administrators should prioritize kernel updates that resolve this concurrency flaw. Ensuring that packet processing remains isolated between parallel threads is critical for network reliability and performance.