CVE-2026-43052

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

State: Published
Severity: Not scored
Published: May 1, 2026
Updated: Oct 15, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing.

Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	941c93cd039852b7ab02c74f4698c99d82bd6cfe to before e602246235fc2ef06c39b2e9cf147d84d0896b73Affected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 6813a8b1b240756dad4375f3e020ce10e4e3871bAffected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 44839ea7e96b3659a1606f3d5267063135479b7cAffected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before ba5b43db126a5e7378553869e3f7954d9187349fAffected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 8148c2fda4ebb17104a573649c9b699208ad10eeAffected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before be81f17151fcb8546a95f35ca8f4231b065985deAffected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before e77b2937aaa20264e4bd699d3244bdb50e7e3343Affected 941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 7d73872d949c488a1d7c308031d6a9d89b5e0a8bAffected
LinuxLinux	3.2Affected before 3.2Not affected 5.10.259 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.142 through 6.6.Not affected 6.12.81 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

941c93cd039852b7ab02c74f4698c99d82bd6cfe to before e602246235fc2ef06c39b2e9cf147d84d0896b73Affected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 6813a8b1b240756dad4375f3e020ce10e4e3871bAffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 44839ea7e96b3659a1606f3d5267063135479b7cAffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before ba5b43db126a5e7378553869e3f7954d9187349fAffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 8148c2fda4ebb17104a573649c9b699208ad10eeAffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before be81f17151fcb8546a95f35ca8f4231b065985deAffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before e77b2937aaa20264e4bd699d3244bdb50e7e3343Affected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to before 7d73872d949c488a1d7c308031d6a9d89b5e0a8bAffected

LinuxLinux

3.2Affected
before 3.2Not affected
5.10.259 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.142 through 6.6.*Not affected
6.12.81 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.