Riskcovery

CVE-2026-64506

wifi: rtw89: correct drop logic for malformed AMPDU frames

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: correct drop logic for malformed AMPDU frames

The previous commit aims to fix issue caused by malformed AMPDU frames. But the drop logic fails to deal with the first AMPDU packet paired with certain range of sequence number, and leads to unexpected packet drop. It is more likely to encounter this failure when there are busy traffic during rekey process and could lead to disconnection from the AP. Fix this by adding a initial state judgement and only reset status during pairwise rekey.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bda294ed0ed05ada2a832b19a55dd4a6fa72b1a1 to before 994994cfadaf1fd362dea9b8d9d633f85dc1b3c3Affected
  • bda294ed0ed05ada2a832b19a55dd4a6fa72b1a1 to before 63ccdfac8677387dfdbd9d4336089e9823280704Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.