CVE-2026-64506

kernel: wifi: rtw89: correct drop logic for malformed AMPDU frames

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Realtek 802.11ac wireless driver (rtw89) within the Linux kernel. A remote attacker, within adjacent network range, could send specially crafted malformed Aggregated MAC Protocol Data Unit (AMPDU) frames. This incorrect handling of frames, particularly during rekey processes, leads to unexpected packet drops. The consequence is a denial of service (DoS), causing affected clients to disconnect from the wireless access point.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-841 · Improper Enforcement of Behavioral Workflow