In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: drop stray 'static' from fast-RX rx_result

ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but
its per-invocation rx_result is declared static. Concurrent callers then
share one instance and can overwrite each other's result between
ieee80211_rx_mesh_data() and the switch on res.

That can make a packet that was queued or consumed by
ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make
a packet that should continue return as queued.

Make res an automatic variable so each invocation keeps its own result.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3468e1e0c639032a603450f0830ccabfa76f5806 affected < 03584528bfffb195e384698af9148b94e42e3f14
3468e1e0c639032a603450f0830ccabfa76f5806 affected < 1739fc31b4de06c5c78ce0741182770fb079091e
3468e1e0c639032a603450f0830ccabfa76f5806 affected < e131562d6f2b958148c35c98831b007f47f0e3d3
3468e1e0c639032a603450f0830ccabfa76f5806 affected < 3ef44f96ccc3e06e059dec57842e366f0c4b1893
3468e1e0c639032a603450f0830ccabfa76f5806 affected < 7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba
Linux Linux affected
Version Status Constraints
6.4 affected —
0 unaffected < 6.4
6.6.140 unaffected ≤ 6.6.*
6.12.88 unaffected ≤ 6.12.*
6.18.30 unaffected ≤ 6.18.*
7.0.7 unaffected ≤ 7.0.*
7.1-rc3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/03584528bfffb195e384698af9148b94e42e3f14 cve-icon cve-icon
https://git.kernel.org/stable/c/1739fc31b4de06c5c78ce0741182770fb079091e cve-icon cve-icon
https://git.kernel.org/stable/c/3ef44f96ccc3e06e059dec57842e366f0c4b1893 cve-icon cve-icon
https://git.kernel.org/stable/c/7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba cve-icon cve-icon
https://git.kernel.org/stable/c/e131562d6f2b958148c35c98831b007f47f0e3d3 cve-icon cve-icon
History

Thu, 28 May 2026 12:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Thu, 28 May 2026 10:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.
Title wifi: mac80211: drop stray 'static' from fast-RX rx_result
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-28T09:36:08.211Z

Reserved: 2026-05-13T15:03:33.101Z

Link: CVE-2026-46152

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-28T10:16:30.827

Modified: 2026-05-28T10:16:30.827

Link: CVE-2026-46152

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-28T11:45:16Z

Weaknesses