In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[].
Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-debug-modulesUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-64kUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-modules-extra-matchedUpgrade kernel-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-64k-modules-coreUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-core | Oct 11, 2026 | Sep 14, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Jul 24, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 29, 2026 | Jul 24, 2026 |
| Rocky_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-rtUpgrade libperfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-modules-extra-matchedUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel | Sep 15, 2026 | Sep 10, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-26.04bUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracleUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-oracle-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-raspiUpgrade linux-image-oem-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-generic-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gke-7.0 | Sep 14, 2026 | Sep 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub