CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: don't send a 6E related command when not supported
MCCALLOWEDAPTYPECMD is related to 6E support. Do not send it if the device doesn't support 6E. Apparently, the firmware is mistakenly advertising support for this command even on AX201 which does not support 6E and then the firmware crashes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.12-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.22 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.12 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Compensating control
Do not send MCC_ALLOWED_AP_TYPE_CMD, the 6E-related command, on devices that do not support 6E, including AX201.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43325?
The severity of CVE-2026-43325 is classified as moderate.
How do I fix CVE-2026-43325?
To fix CVE-2026-43325, ensure that you are using an updated version of the Linux kernel that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2026-43325?
CVE-2026-43325 affects certain versions of the Linux kernel that utilize the iwlwifi driver.
What systems are impacted by CVE-2026-43325?
CVE-2026-43325 impacts systems running the Linux kernel with the iwlwifi driver that do not support 6E related commands.
Is CVE-2026-43325 related to WiFi security?
Yes, CVE-2026-43325 is related to WiFi security as it involves the handling of commands for WiFi 6E support.