CVE-2026-23279

kernel: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's mac80211 component. A remote mesh peer with an established peer link can trigger a kernel NULL pointer dereference by sending a specially crafted Wi-Fi (Wireless Fidelity) management frame. This frame, a SPECTRUM_MGMT/CHL_SWITCH action frame, omits a required information element, leading to a system crash and a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference