CVE-2026-64030

A flaw was found in the Linux kernel's Wi-Fi (mac80211) component. A connected WiFi 7 Access Point (AP) can trigger an out-of-bounds write by sending a specially crafted EPCS Enable Response action frame. This vulnerability can lead to a kernel crash, resulting in a Denial of Service (DoS) for the affected system.

Red Hat has evaluated this vulnerability as having an Important severity impact because an untrusted access point within wireless range can trigger a kernel panic and complete denial of service without requiring user interaction. Standard Red Hat Enterprise Linux server deployments rarely operate wireless hardware or drivers, significantly reducing exposure across typical installations. Exposure is primarily restricted to client systems or endpoints equipped with active wireless interfaces connected to untrusted Wi-Fi 7 networks.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.