In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: reject VHT opmode for unsupported channel widths
VHT operating mode notifications are not defined for channel widths below 20 MHz. In particular, 5 MHz and 10 MHz are not valid under the VHT specification and must be rejected.
Without this check, malformed notifications using these widths may reach ieee80211_chan_width_to_rx_bw(), leading to a WARN_ON due to invalid input. This issue was reported by syzbot.
Reject these unsupported widths early in sta_link_apply_parameters() when opmode_notif is used. The accepted set includes 20, 40, 80, 160, and 80+80 MHz, which are valid for VHT. While 320 MHz is not defined for VHT, it is allowed to avoid rejecting HE or EHT clients that may still send a VHT opmode notification.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-realtimeUpgrade linux-image-azureUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-generic | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub