Skip to main content

Linux Kernel EUVDEUVD-2026-39208

| CVE-2026-53257 MEDIUM
2026-06-25 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-gff8-2g4x-324x
Denial Of Service Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local vector since triggering requires system presence and driver interaction; PR:L for minimal local account; availability-only impact as the outcome is exclusively a kernel crash with no data exposure.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 08, 2026 - 17:31 vuln.today
CVSS changed
Jul 08, 2026 - 16:52 NVD
5.5 (MEDIUM)
Patch available
Jun 25, 2026 - 10:32 EUVD
CVE Published
Jun 25, 2026 - 09:16 nvd
MEDIUM 5.5
CVE Published
Jun 25, 2026 - 09:16 cve.org
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: enforce HE/EHT cap/oper consistency

Xiang Mei reports that mac80211 could crash if eht_cap is set but eht_oper isn't. Rather than fixing that for the individual user(s), enforce that both HE/EHT have consistent elements.

AnalysisAI

Kernel crash in Linux cfg80211 WiFi subsystem occurs when EHT (Wi-Fi 7 / 802.11be) capability elements are present without matching EHT operation elements, triggering a null pointer dereference in mac80211 and causing a denial of service. Systems running affected kernel versions with Wi-Fi 7 hardware are at risk of a local-privilege kernel panic with no confidentiality or integrity impact. EPSS is extremely low at 0.15% (5th percentile) and no public exploit has been identified; this is not listed in CISA KEV.

Technical ContextAI

The vulnerability resides in the cfg80211 wireless configuration layer (the kernel's generic 802.11 management framework) and the mac80211 stack that builds upon it. IEEE 802.11be (Wi-Fi 7 / EHT - Extremely High Throughput) extends the HE (High Efficiency / 802.11ax) standard and introduces paired Information Elements: eht_cap (EHT capabilities) and eht_oper (EHT operation). The kernel failed to enforce consistency between these two structures. When eht_cap is populated but eht_oper is absent, mac80211 dereferences a null or uninitialized pointer, causing a kernel panic. CPE data confirms affected scope as the Linux kernel broadly (cpe:2.3:o:linux:linux_kernel:*) with Linux 7.1 RC1 through RC6 explicitly enumerated. CWE is formally unassigned, but the root cause class is consistent with CWE-476 (NULL Pointer Dereference) or CWE-20 (Improper Input Validation) due to absent consistency checks on paired configuration structures.

RemediationAI

The primary fix is to upgrade to Linux kernel 7.0.13 or the patched 7.1 mainline release, applying stable commits 0f5e9ddd7e8e7758771a63cdd498a2007dc8da7a and cb9959ab5f99611d27a06586add84811fe8102dc (available at https://git.kernel.org/stable/c/). Distribution-specific stable kernels incorporating these commits should be applied as available. As a compensating control where patching is not immediately possible, disabling EHT/Wi-Fi 7 support via driver module parameters or blacklisting the affected wireless driver prevents the vulnerable code path from executing, at the cost of reducing Wi-Fi performance to 802.11ax (Wi-Fi 6/6E) speeds. On multi-user systems, restricting unprivileged user access to wireless subsystem controls (e.g., via udev rules or MAC policy) reduces exposure consistent with the PR:L requirement in the CVSS vector. No special considerations apply to systems without Wi-Fi 7 hardware, as they cannot reach the affected code path.

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.1 Affected

Share

EUVD-2026-39208 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy