CVE-2026-64515

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-64515

Key Details

CVE	CVE-2026-64515
CVSS Score / Version	8.3 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H`
CVSS Prose	attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is low; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix MLE defragmentation

If either reconf or EPCS multi-link element (MLE) is contained in

a non-transmitted profile, the defragmentation routine is called

with a pointer to the defragmented copy, but the original elements.

This is incorrect for two reasons:

- if the original defragmentation was needed, it will not find the

correct data

- if the original frame is at a higher address, the parsing will

potentially overrun the heap data (though given the layout of

the buffers, only into the new defragmentation buffer, and then

it has to stop and fail once that's filled with copied data.

Fix it by tracking the container along with the pointer and in

doing so also unify the two almost identical defragmentation

routines. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-64515
CVE	https://www.cve.org/CVERecord?id=CVE-2026-64515

Source

Reference

NVD

CVE