wifi: nl80211: reject beacons with bad HE operation
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this.
CVE-2026-97517
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2026-97517
Kernel
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 6.1.189
Source reference:
/affected/1/ranges6.6.158Source reference:
/affected/1/ranges6.12.111Source reference:
/affected/1/ranges6.18.53Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "7e8d6f12bb2a729290ebb0096248ea46d2868fc6"
},
{
"fixed": "6e24f72985782013bf2feb0f0712b2ac9390e909"
},
{
"fixed": "8fe5eb7b68d76b3801409ada7365c67696e7af84"
},
{
"fixed": "6c4bb5450b9d9111faaaba581ea45a3a79844e50"
},
{
"fixed": "0d635f0b4a634eb599ed13a87ece0b5f129f9900"
},
{
"fixed": "8b9a100e1a76c52988b31099b349fd95a58c8768"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97517.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.7.0"
},
{
"fixed": "6.1.189"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.158"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.111"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.53"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97517.json"
}
}
]- Related CVEs
- CVE-2026-97517
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #83541 · Revision 1
- Added to Heist Feed
- Publisher date