CVE-2026-63869
kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · November 5, 2026
Description
A flaw was found in the Linux kernel's mac80211 WiFi subsystem. This vulnerability allows an attacker to cause undefined behavior by injecting a specially crafted frame with an invalid radiotap header. This can lead to system instability or a denial of service (DoS), potentially causing the system to crash.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.6CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CWE-1335 · Incorrect Bitwise Shift of Integer