CVE-2026-56101

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-56101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-56101
Published
2026-09-08T16:00:30Z
Modified
2026-09-17T14:15:01Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
Details

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by more than 60 seconds. Attackers can exploit the reversed TKIP MIC failure countermeasure window check to deauthenticate all associated TKIP stations and block reassociation for up to 90 seconds, while within-window MIC failures that should engage countermeasures are silently discarded, leaving key-recovery attempts undetected.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-697"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56101.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "1ee99dfcc4ddc87afc6395d5d3094e9d2314fb5a"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/openbsd/src

Affected ranges

Type
GIT
Repo
https://github.com/openbsd/src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1ee99dfcc4ddc87afc6395d5d3094e9d2314fb5a
Database specific
Show details 
{
    "source": "REFERENCES"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56101.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "300617047170580378527002340528669865533",
            "length": 1482
        },
        "id": "CVE-2026-56101-48d4b4f9",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openbsd/src/commit/1ee99dfcc4ddc87afc6395d5d3094e9d2314fb5a",
        "target": {
            "file": "sys/net80211/ieee80211_crypto_tkip.c",
            "function": "ieee80211_michael_mic_failure"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "85780842530295007531292603641156450823",
                "97012839949739404105432648106876498134",
                "202189314560792522843605071384591110056",
                "162795710594278135889455152465052315462",
                "183690837900100058697445990113273843218"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-56101-66a050b6",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openbsd/src/commit/1ee99dfcc4ddc87afc6395d5d3094e9d2314fb5a",
        "target": {
            "file": "sys/net80211/ieee80211_crypto_tkip.c"
        }
    }
]
vanir_signatures_modified 
"2026-09-17T14:15:01Z"