216.73.217.22

CVE-2026-43052

· Published 01/05/2026 15:16 · Modified 01/05/2026 15:24

Labels: CVE-2026-43052 2026-05-01416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2026-43052

Essential information

Published
01/05/2026 15:16
Modified
01/05/2026 15:24
Author
—
Creator
—
CVSS
7.1 HIGH (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS metrics

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

NVD status

Status
Modified — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source
nist-nvd-api
NVD
View on NVD

Affected products (CPE)

ProductCPE
linux / linux kernel cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux kernel cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
linux / linux kernel cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
linux / linux kernel cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
linux / linux kernel cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

References