wifi: mac80211: add HE 6 GHz capability in the scan elems len (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 8 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scan_ies_len. Otherwise, building probe request elements can fail, triggering the WARN_ON in __ieee80211_start_scan().
References
- https://git.kernel.org/stable/c/db19d5414227d86cee77a000607a6710d7f36853
- https://git.kernel.org/stable/c/be7bfdea1ec9b672a80c736bd6ed932e1adebef8
- https://git.kernel.org/stable/c/8659bd6c4c852096b6621086d1ea38eed84b454a
- https://git.kernel.org/stable/c/ad5bd0f6a0c337a80c141ea8e6c7a1d9c145be79
- https://git.kernel.org/stable/c/9d83c08dcce808c732988a5291e3ef4f59d09edb
- https://git.kernel.org/stable/c/cd54bf333f5631d3630bab0a832e9ae648f73515
European references
- ENISA EUVD · EUVD-2026-93313
- GCVE · GCVE-0-2026-98328
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1374 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < db19d5414227d86cee77a000607a6710d7f36853 ; affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < be7bfdea1ec9b672a80c736bd6ed932e1adebef8 ; affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < 8659bd6c4c852096b6621086d1ea38eed84b454a ; affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < ad5bd0f6a0c337a80c141ea8e6c7a1d9c145be79 ; affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < 9d83c08dcce808c732988a5291e3ef4f59d09edb ; affected 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 < cd54bf333f5631d3630bab0a832e9ae648f73515 |
| Linux · Linux | affected 5.8 ; unaffected 0 < 5.8 ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.* ; unaffected 6.12.112 ≤ 6.12.* ; unaffected 6.18.54 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |