In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject oversized EMA RNR lists
nl80211_parse_rnr_elems() stores the parsed element count in a u8-backed cfg80211_rnr_elems::cnt field and uses that count to size the flexible array allocation.
Reject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches 255, before incrementing it again. This keeps the parser aligned with the data structure it fills and matches the existing bound check used by nl80211_parse_mbssid_elems().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Jun 25, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade rvUpgrade kernel-modules-extra-matchedUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfo | Sep 15, 2026 | Sep 10, 2026 |
| Ubuntu | — | Upgrade linux-image-gke-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oem-26.04aUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-azure-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-virtualUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04bUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-ibmUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-raspiUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oracle-7.0 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub