CVE-2026-46152
Linux · Kernel
A race condition in the Linux kernel's mac80211 fast-RX handling can lead to packet processing errors.
Executive summary
A high-severity concurrency issue in the Linux kernel's wireless subsystem can lead to incorrect packet processing and potential denial of service.
Vulnerability
A static variable rx_result in ieee80211_invoke_fast_rx() is accessed concurrently, allowing callers to overwrite each other's results during parallel RX operations.
Business impact
This flaw can result in the incorrect processing of Wi-Fi packets, potentially leading to unstable network performance or denial of service. With a CVSS score of 8.8, this vulnerability poses a risk to the reliability of wireless communication.
Remediation
Immediate Action: Apply the kernel patch that converts rx_result to an automatic variable, ensuring each invocation maintains its own result.
Proactive Monitoring: Monitor wireless performance metrics and system logs for packet processing errors or driver-related errors.
Compensating Controls: If patching is unavailable, implement network-level monitoring to detect and alert on anomalous packet loss or wireless instability.
Exploitation status
Public Exploit Available: false
Analyst recommendation
Administrators should prioritize kernel updates that resolve this concurrency flaw. Ensuring that packet processing remains isolated between parallel threads is critical for network reliability and performance.