CVE-2026-46152

A flaw was found in the Linux kernel's Wi-Fi (mac80211) subsystem. The ieee80211_invoke_fast_rx() function uses a static variable for rx_result, which is shared across concurrent calls. This can lead to incorrect processing of Wi-Fi packets, where a packet might be mishandled or its status incorrectly reported. Such issues can result in unexpected network behavior or a denial of service within the wireless communication.

This is an Important flaw in the Linux kernel's mac80211 Wi-Fi subsystem, affecting Red Hat Enterprise Linux and Red Hat In-Vehicle OS. The vulnerability arises from a shared static variable in concurrent fast-RX operations, which can lead to incorrect Wi-Fi packet processing. This may result in unexpected network behavior or a denial of service, impacting the reliability of wireless communication.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable the Wi-Fi interface if wireless networking is not required. This can be achieved by preventing the mac80211 kernel module from loading. To blacklist the mac80211 module: echo "blacklist mac80211" | sudo tee /etc/modprobe.d/blacklist-mac80211.conf. After modifying the blacklist, regenerate the initramfs and reboot the system for the changes to take effect: sudo dracut -f -v and sudo reboot. Disabling the mac80211 module will prevent Wi-Fi functionality on the system.