A vulnerability in the Linux kernel mac80211 wifi subsystem allows an adjacent attacker to cause system instability or potential code execution via malformed packets.

The vulnerability exists in the ieee80211_ml_epcs function, where the link_id is not correctly bounds-checked. An unauthenticated attacker within range can send a malicious PRIO_ACCESS ML element containing a zero value for link_id, leading to out-of-bounds memory access.

This vulnerability allows an adjacent attacker to crash the wireless stack, resulting in a denial of service, or potentially achieve arbitrary code execution. With a CVSS score of 8.8, this is a high-severity issue for any infrastructure relying on Linux-based wireless access points or client devices.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or later as specified by the vendor.

Proactive Monitoring: Monitor wireless interface logs for errors related to packet processing or unexpected driver restarts.

Compensating Controls: Utilize WPA3 or other robust link-layer encryption to mitigate the ability of unauthorized devices to inject malicious management frames.

Public Exploit Available: Unknown

Wireless infrastructure and mobile devices running affected kernel versions are at risk. Organizations should expedite the deployment of kernel updates to all wireless-enabled Linux devices to protect against potential remote exploitation.