A flaw in the Linux kernel Wi-Fi subsystem allows for an out-of-bounds read, potentially impacting system stability and data confidentiality.

This is an out-of-bounds read vulnerability in the ieee80211_parse_neg_ttlm function. The vulnerability is triggered via adjacent network access, requiring no authentication from an attacker, which contributes to its high CVSS score of 8.1.

The vulnerability allows an attacker within radio range to potentially access sensitive memory or crash the Wi-Fi subsystem. This presents a risk to confidentiality and availability, especially in environments where secure wireless communication is paramount. The high CVSS score reflects the ease of exploitation from adjacent network segments.

Immediate Action: Update the Linux kernel to versions 6.12.92, 6.18.34, 7.0.11, or later.

Proactive Monitoring: Monitor for unexpected Wi-Fi connection drops or kernel messages indicating memory-related issues in the wireless driver.

Compensating Controls: If patching is delayed, consider disabling unnecessary wireless interfaces or implementing physical access controls to limit potential adjacent network exposure.

Public Exploit Available: False

Given the potential for remote adjacent exploitation and the high severity score, organizations should treat this update with high priority. Applying the kernel patch is the only definitive way to resolve the underlying logic error in the TTLM parser.