CVE-2026-53317

A flaw was found in the Linux kernel's Wi-Fi drivers (mt76 and mt7921). A remote attacker could exploit this by configuring a Wi-Fi station with an Association ID (AID) exceeding the expected limit. This malformed AID can cause a firmware crash, leading to a Denial of Service (DoS) on the affected system. This issue primarily impacts Access Point (AP) interfaces.

This vulnerability is rated as Moderate impact because exploitation requires systems equipped with MediaTek MT7921 or MT7922 wireless hardware to actively operate in Access Point (AP) mode, an uncommon configuration in enterprise Red Hat environments. Additionally, default wireless access point implementations enforce association limits that prevent out-of-range Association IDs during standard operations. The potential impact is limited to a wireless firmware crash causing a denial of service on the network interface without leading to privilege escalation or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.