CVE-2026-46152
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In the Linux kernel's mac80211 subsystem, a vulnerability was found due to an incorrect use of a static 'rx_result' variable in ieee80211_invoke_fast_rx(). When multiple threads process packets concurrently, results can be overwritten, leading to incorrect packet routing.
Risk Assessment
The organization faces unpredictable Wi-Fi network behavior, including potential packet drops or misrouting, which could result in data loss or communication integrity issues.
Recommendation
Immediately update the Linux kernel to a version containing the fix that removes the 'static' declaration for the 'rx_result' variable and replaces it with an automatic variable.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.