CVE-2026-46152

8.8

Linux · Kernel

A race condition in the Linux kernel's mac80211 fast-RX handling can lead to packet processing errors.

Executive summary

A high-severity concurrency issue in the Linux kernel's wireless subsystem can lead to incorrect packet processing and potential denial of service.

Vulnerability

A static variable rx_result in ieee80211_invoke_fast_rx() is accessed concurrently, allowing callers to overwrite each other's results during parallel RX operations.

Business impact

This flaw can result in the incorrect processing of Wi-Fi packets, potentially leading to unstable network performance or denial of service. With a CVSS score of 8.8, this vulnerability poses a risk to the reliability of wireless communication.

Remediation

Immediate Action: Apply the kernel patch that converts rx_result to an automatic variable, ensuring each invocation maintains its own result.

Proactive Monitoring: Monitor wireless performance metrics and system logs for packet processing errors or driver-related errors.

Compensating Controls: If patching is unavailable, implement network-level monitoring to detect and alert on anomalous packet loss or wireless instability.

Exploitation status

Public Exploit Available: false

Analyst recommendation

Administrators should prioritize kernel updates that resolve this concurrency flaw. Ensuring that packet processing remains isolated between parallel threads is critical for network reliability and performance.

More Linux CVEs