OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64506

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of malformed AMPDU frames within the rtw89 Wi-Fi driver, specifically in its drop logic for the first AMPDU packet when paired with certain sequence numbers. This flaw can result in unexpected packet drops, particularly during high traffic conditions or rekeying processes, potentially leading to disconnections from the access point. Organizations using affected Linux systems, especially those relying on Wi-Fi connectivity in high-traffic environments, should prioritize addressing this vulnerability to maintain stable network connections.

CVE
CVE-2026-64506
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix issue caused by malformed AMPDU frames. But the drop logic fails to deal with the first AMPDU packet paired with certain range of sequence number, and leads to unexpected packet drop. It is more likely to encounter this failure when there are busy traffic during rekey process and could lead to disconnection from the AP. Fix this by adding a initial state judgement and only reset status during pairwise rekey.