CVE-2026-43052: wifi: mac80211: check tdls flag in ieee80211_tdls_oper
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check tdls flag in ieee80211tdlsoper
When NL80211TDLSENABLELINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing.
Add a check for sta->sta.tdls early in the ENABLELINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add a check for sta->sta.tdls early in the NL80211_TDLS_ENABLE_LINK (ENABLE_LINK) case so the operation proceeds only for actual TDLS stations, preventing unintended side effects such as modifying channel context and HT protection.
mac80211 (ieee80211_tdls_oper) sta->tdls flag check = must be true (station is a TDLS peer)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43052?
CVE-2026-43052 has been classified with a moderate severity level due to potential exploitation risks in wireless connections.
How do I fix CVE-2026-43052?
To fix CVE-2026-43052, update to the latest version of the Linux kernel that includes the patch addressing the mac80211 issue.
What does CVE-2026-43052 affect?
CVE-2026-43052 affects the Linux kernel's mac80211 module used for wireless networking.
What is the nature of the vulnerability described in CVE-2026-43052?
CVE-2026-43052 is a vulnerability that allows the NL80211_TDLS_ENABLE_LINK command to bypass certain validation checks.
Can CVE-2026-43052 be exploited remotely?
Yes, CVE-2026-43052 can potentially be exploited remotely if a malicious actor connects to a vulnerable wireless network.