CVE-2026-64515: wifi: mac80211: fix MLE defragmentation
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix MLE defragmentation
If either reconf or EPCS multi-link element (MLE) is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original elements.
This is incorrect for two reasons: - if the original defragmentation was needed, it will not find the correct data - if the original frame is at a higher address, the parsing will potentially overrun the heap data (though given the layout of the buffers, only into the new defragmentation buffer, and then it has to stop and fail once that's filled with copied data.
Fix it by tracking the container along with the pointer and in doing so also unify the two almost identical defragmentation routines.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64515?
The severity of CVE-2026-64515 is rated at 47.
What type of vulnerability is CVE-2026-64515?
CVE-2026-64515 is a vulnerability related to the defragmentation handling in the MLE of the Linux kernel's mac80211 subsystem.
How do I fix CVE-2026-64515?
To fix CVE-2026-64515, update your Linux kernel to the latest patched version that addresses this vulnerability.
What systems are affected by CVE-2026-64515?
CVE-2026-64515 affects systems utilizing the Linux kernel's mac80211 subsystem for Wi-Fi operations.
When was CVE-2026-64515 published?
CVE-2026-64515 was published on July 25, 2026.