Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLANSTAPSSTA state (aka power-save mode), related to stainfo.c and tx.c.