wifi: iwlegacy: fix broadcast stations deallocation (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: fix broadcast stations deallocation On the error path of __il4965_up(), il_dealloc_bcast_stations() clears only IL_STA_UCODE_ACTIVE, leaving IL_STA_BCAST set. This causes the same broadcast stations to be deallocated again by __il4965_down(). This can occur when RF_KILL is toggled during driver startup. To fix clear the entire 'used' field, since we will not do any other operations on the station.
References
- https://git.kernel.org/stable/c/275d474a4b4bd4e73b18b1452f12e78806a8843a
- https://git.kernel.org/stable/c/526fdd45548e22eee50ee1062abd88269d9f32e0
- https://git.kernel.org/stable/c/c9a116d691364cd7f59d8329b395adcaf826d5c6
- https://git.kernel.org/stable/c/85d847ff71fe736cbc15ada321256818e630e205
- https://git.kernel.org/stable/c/1d84c2a3de449aceb94ed79eaefecdf1bedb6468
- https://git.kernel.org/stable/c/55d34422c0d91436983028fd3c1546a1c2bee55f
- https://git.kernel.org/stable/c/a9176fe666af1730cab92350f9c8cf67ebf14439
- https://git.kernel.org/stable/c/b5526b780f8b297a76030410b96ba29153afb98f
European references
- ENISA EUVD · EUVD-2026-93123
- GCVE · GCVE-0-2026-98195
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1374 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected c2fd34469d1623111e3c3db65cde533f3bddc26e < 275d474a4b4bd4e73b18b1452f12e78806a8843a ; affected c2fd34469d1623111e3c3db65cde533f3bddc26e < 526fdd45548e22eee50ee1062abd88269d9f32e0 ; affected c2fd34469d1623111e3c3db65cde533f3bddc26e < c9a116d691364cd7f59d8329b395adcaf826d5c6 ; affected c2fd34469d1623111e3c3db65cde533f3bddc26e < 85d847ff71fe736cbc15ada321256818e630e205 ; affected c2fd34469d1623111e3c3db65cde533f3bddc26e < 1d84c2a3de449aceb94ed79eaefecdf1bedb6468 ; affected c2fd34469d1623111e3c3db65cde533f3bddc26e < 55d34422c0d91436983028fd3c1546a1c2bee55f |
| Linux · Linux | affected 4.7 ; unaffected 0 < 4.7 ; unaffected 5.10.271 ≤ 5.10.* ; unaffected 5.15.222 ≤ 5.15.* ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |