CVE-2026-64255

A flaw was found in the Linux kernel's iwlwifi (Intel Wireless WiFi) driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement (BA) session handlers. This occurs when the sta_mask value is zero, leading to an incorrect station ID calculation and potential system instability or denial of service.

This vulnerability is evaluated as having Moderate severity because exploitation requires systems equipped with physical Intel Wi-Fi hardware supporting multi-link device operations, which are uncommon in standard enterprise server environments. An attacker requires local access or adjacent wireless proximity to interact with active block acknowledgment sessions to trigger the out-of-bounds condition. Consequently, the operational risk is primarily confined to denial of service or kernel instability on edge or client workstations where this wireless driver is actively utilized.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.