Veille CVE

‹ Retour à la liste

CVE-2026-46152

8.8 Élevée

Publiée le 28/05/2026 à 12:16 · Modifiée le 19/10/2026 à 22:18 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
3.1 8.8 Élevée 416baaa9-dc9f-4396-8d5f-8c081fb06d67 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1 7.0 Élevée 0b0ca135-0b70-47e7-9f44-1890c2a1c46c CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Faiblesses (CWE)

Références

Ailleurs