In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: avoid out-of-bounds access in monitor

In NAN, we don't know on what band the frame will be sent. Therefore we set info->band to NUM NL80211 BANDS. However, this leads to out-of-bound access in ieee80211 add tx radiotap header when we try to access the sbands array.

Fix it by not accessing the array if the band is NUM NL80211 BANDS. This means that we will not report rate info for legacy rate in NAN. But nobody really cares about it.