CVE-2026-43052

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43052
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/44839ea7e96b3659a1606f3d5267063135479b7c
https://git.kernel.org/stable/c/6813a8b1b240756dad4375f3e020ce10e4e3871b
https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b Patch
https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee Patch
https://git.kernel.org/stable/c/ba5b43db126a5e7378553869e3f7954d9187349f
https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de Patch
https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
History

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/44839ea7e96b3659a1606f3d5267063135479b7c -
  • () https://git.kernel.org/stable/c/6813a8b1b240756dad4375f3e020ce10e4e3871b -
  • () https://git.kernel.org/stable/c/ba5b43db126a5e7378553869e3f7954d9187349f -

07 May 2026, 18:19

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b - () https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b - Patch
References () https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee - () https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee - Patch
References () https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de - () https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de - Patch
References () https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 - () https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 - Patch
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

01 May 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-01 15:16

Updated : 2026-06-01 17:17

NVD link : CVE-2026-43052

Mitre link : CVE-2026-43052

CVE.ORG link : CVE-2026-43052

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo