CVE-2026-53182

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nl80211 parse rnr elems() function where the parsed element count is stored in a u8-backed cfg80211 rnr elems::cnt field. This count is used to determine the size of the flexible array allocation. If nested NL80211 ATTR EMA RNR ELEMS input is provided and the count reaches 255, an integer overflow can occur if the count is incremented again, causing a mismatch between the parser and the data structure it fills.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.