CVE-2026-74336

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. An out-of-bounds read vulnerability exists when parsing the S1G (Sub-1 GHz) TIM (Traffic Indication Map) Partial Virtual Bitmap (PVB) element. Due to an incorrect boundary check, the system can read two bytes beyond the allocated memory for the TIM element. This could lead to the disclosure of sensitive adjacent kernel memory data.

This vulnerability is rated as Moderate because exploitation requires proximity to transmit crafted 802.11ah (Sub-1 GHz) radio frames to a system equipped with supported wireless hardware, and the flaw only results in reading up to two bytes past the boundary of the TIM element. This read can lead to a system crash (denial of service) or minor information leakage from adjacent memory, rather than arbitrary code execution. Furthermore, enterprise Red Hat environments rarely deploy or enable Wi-Fi hardware, substantially reducing real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.