CVE-2026-23315

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23315
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Check frame length before accessing the mgmt fields in mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob access. [fix check to also cover mgmt->u.action.u.addba_req.capab, correct Fixes tag]

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0fb3b94a9431a3800717e5c3b6fa2e1045a15029 Patch
https://git.kernel.org/stable/c/4e10a730d1b511ff49723371ed6d694dd1b2c785 Patch
https://git.kernel.org/stable/c/7ae7b093b7dba9548a3bc4766b9364b97db4732d Patch
https://git.kernel.org/stable/c/7b692dff8df0ba5feb8df00f27d906d6eb1fe627 Patch
https://git.kernel.org/stable/c/84419556359bc96d3fe1623d47a64c86542566cc Patch
https://git.kernel.org/stable/c/9612d91f617231e03c49cb9b0c02f975a3b4f51f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

23 Apr 2026, 21:06

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: wifi: mt76: Corregir posible acceso fuera de límites en mt76_connac2_mac_write_txwi_80211() Verificar la longitud del frame antes de acceder a los campos mgmt en mt76_connac2_mac_write_txwi_80211 para evitar un posible acceso fuera de límites. [corregir la verificación para que también cubra mgmt->u.action.u.addba_req.capab, corregir la etiqueta Fixes]
References () https://git.kernel.org/stable/c/0fb3b94a9431a3800717e5c3b6fa2e1045a15029 - () https://git.kernel.org/stable/c/0fb3b94a9431a3800717e5c3b6fa2e1045a15029 - Patch
References () https://git.kernel.org/stable/c/4e10a730d1b511ff49723371ed6d694dd1b2c785 - () https://git.kernel.org/stable/c/4e10a730d1b511ff49723371ed6d694dd1b2c785 - Patch
References () https://git.kernel.org/stable/c/7ae7b093b7dba9548a3bc4766b9364b97db4732d - () https://git.kernel.org/stable/c/7ae7b093b7dba9548a3bc4766b9364b97db4732d - Patch
References () https://git.kernel.org/stable/c/7b692dff8df0ba5feb8df00f27d906d6eb1fe627 - () https://git.kernel.org/stable/c/7b692dff8df0ba5feb8df00f27d906d6eb1fe627 - Patch
References () https://git.kernel.org/stable/c/84419556359bc96d3fe1623d47a64c86542566cc - () https://git.kernel.org/stable/c/84419556359bc96d3fe1623d47a64c86542566cc - Patch
References () https://git.kernel.org/stable/c/9612d91f617231e03c49cb9b0c02f975a3b4f51f - () https://git.kernel.org/stable/c/9612d91f617231e03c49cb9b0c02f975a3b4f51f - Patch
CWE CWE-125
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

25 Mar 2026, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 11:16

Updated : 2026-04-23 21:06

NVD link : CVE-2026-23315

Mitre link : CVE-2026-23315

CVE.ORG link : CVE-2026-23315

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read