CVE-2026-68471

A flaw was found in the Wi-Fi (IEEE 802.11) component of the Linux kernel. The ieee80211_mle_common_size() function uses the first common-info octet as the length for all known MLE (Management Link Establishment) types. However, the ieee80211_mle_size_ok() function did not properly validate this length for all MLE types, specifically for Reconfiguration and Priority Access MLEs. This oversight could allow a remote attacker to provide malformed Wi-Fi management frames, potentially leading to a denial of service or other unspecified impacts due to improper handling of data lengths.

This vulnerability is rated Moderate rather than Important because exploitation requires an attacker to be within adjacent radio range to transmit specially crafted wireless management frames, restricting the potential blast radius to a denial of service on systems with active Wi-Fi hardware. Standard Red Hat Enterprise Linux server environments typically operate on wired infrastructure without active wireless interfaces, drastically reducing real-world exposure. Furthermore, Red Hat Enterprise Linux releases do not include the vulnerable IEEE 802.11 Multi-Link Element parsing logic, leaving supported platforms unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.