AZL-79995
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79995.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-79995
- Upstream
- Published
- 2026-03-18T11:16:16Z
- Modified
- 2026-08-28T17:48:02.642552868Z
- Summary
- CVE-2026-23246 affecting package kernel for versions less than 6.6.130.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: bounds-check linkid in ieee80211ml_reconfiguration
linkid is taken from the ML Reconfiguration element (control & 0x000f), so it can be 0..15. linkremovaltimeout[] has IEEE80211MLDMAXNUMLINKS (15) elements, so index 15 is out-of-bounds. Skip subelements with linkid >= IEEE80211MLDMAXNUMLINKS to avoid a stack out-of-bounds write.
- References