CVE-2026-23152
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
17/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mac80211: correctly decode TTLM with default link map<br />
<br />
TID-To-Link Mapping (TTLM) elements do not contain any link mapping<br />
presence indicator if a default mapping is used and parsing needs to be<br />
skipped.<br />
<br />
Note that access points should not explicitly report an advertised TTLM<br />
with a default mapping as that is the implied mapping if the element is<br />
not included, this is even the case when switching back to the default<br />
mapping. However, mac80211 would incorrectly parse the frame and would<br />
also read one byte beyond the end of the element.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.18.9 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page