CVE-2026-64174

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by sending a specially-crafted malicious Wi-Fi beacon, could exploit a vulnerability in the cfg80211_merge_profile() function. This flaw causes the kernel to spend an excessive amount of processing time, leading to a Denial of Service (DoS) condition. This could theoretically be abused to impact system availability.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires radio proximity to broadcast malicious 802.11 management frames and results only in excessive CPU utilization rather than memory corruption or privilege escalation. Standard enterprise server deployments are typically unaffected in practice, as server hardware rarely utilizes wireless networking adapters. Systems that do not have active Wi-Fi interfaces or drivers loaded are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.