CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject oversized EMA RNR lists
nl80211parsernrelems() stores the parsed element count in a u8-backed cfg80211rnrelems::cnt field and uses that count to size the flexible array allocation.
Reject nested NL80211ATTREMARNRELEMS input once the count reaches 255, before incrementing it again. This keeps the parser aligned with the data structure it fills and matches the existing bound check used by nl80211parsembssidelems().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53182?
CVE-2026-53182 has a severity rating of high with a CVSS score of 7.8.
What systems are affected by CVE-2026-53182?
CVE-2026-53182 affects the Linux kernel and specifically impacts versions that utilize the nl80211 protocol.
How can I fix CVE-2026-53182?
To fix CVE-2026-53182, update your Linux kernel to the latest version that addresses this vulnerability.
What kind of vulnerability is CVE-2026-53182?
CVE-2026-53182 is a high severity denial-of-service vulnerability related to oversized EMA RNR lists in the nl80211 protocol.
Is CVE-2026-53182 a widely exploitable vulnerability?
Yes, CVE-2026-53182 can be exploited remotely, making it a significant risk to systems using vulnerable versions of the Linux kernel.