CVE-2026-23152: wifi: mac80211: correctly decode TTLM with default link map
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: correctly decode TTLM with default link map
TID-To-Link Mapping (TTLM) elements do not contain any link mapping presence indicator if a default mapping is used and parsing needs to be skipped.
Note that access points should not explicitly report an advertised TTLM with a default mapping as that is the implied mapping if the element is not included, this is even the case when switching back to the default mapping. However, mac80211 would incorrectly parse the frame and would also read one byte beyond the end of the element.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-azure-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1021.21~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-fde-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1018.18~24.04.1 - Upgrade
Upgrade
ubuntu/linux-gcp-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1021.24~24.04.1 - Upgrade
Upgrade
ubuntu/linux-hwe-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-41.41~24.04.1 - Upgrade
Upgrade
ubuntu/linux-nvidia-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1031.31 - Upgrade
Upgrade
ubuntu/linux-oem-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1030.30 - Upgrade
Upgrade
ubuntu/linux-oracle-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1019.19~24.04.3 - Upgrade
Upgrade
ubuntu/linux-realtime-6.17to a version that resolves this vulnerability.Fixed in 6.17.0-1018.20~24.04.1 - Configuration
Do not explicitly report an advertised TTLM element when using the default link mapping, including when switching back to the default mapping.
Wi-Fi access points advertised TID-To-Link Mapping (TTLM) with default mapping = do not advertise
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23152?
The severity of CVE-2026-23152 is classified as medium, indicating potential risks but typically requiring specific conditions to exploit.
How do I fix CVE-2026-23152?
To mitigate CVE-2026-23152, update your Linux kernel to the latest version that includes the fix for this vulnerability.
What type of software is affected by CVE-2026-23152?
CVE-2026-23152 affects the Linux kernel, specifically its handling of TID-To-Link Mapping in the mac80211 subsystem.
Can CVE-2026-23152 be exploited remotely?
CVE-2026-23152 may allow for exploitation in specific environments, particularly if network configurations are not managed securely.
What is the main impact of CVE-2026-23152?
The main impact of CVE-2026-23152 is the potential for improper handling of wireless network traffic, which could lead to unauthorized access.