CVE-2026-64174

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cfg80211 merge profile() function, which is responsible for reassembling Multi-BSSID non-transmitted BSS profiles split across multiple MBSSID elements. The function utilizes a while-loop that calls cfg80211 get profile continuation(ie, ielen, mbssid elem, sub elem) but fails to advance the mbssid elem and sub elem variables within the loop body. Consequently, each iteration repeatedly processes the same continuation, copying the same data into the merged ie buffer at an increasing offset until the buffer is full. A specially-crafted malicious beacon can exploit this behavior to force the kernel to spend an excessive amount of time processing the request, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.