CVE-2026-64255

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iwlwifi wifi driver within the MLD (Multi-Link Device) component. Three BA (Block Acknowledgement) session handlers use the ffs() function on the sta mask variable to derive a station ID without verifying that sta mask is non-zero. If sta mask is zero, ffs() returns 0, and the subsequent subtraction results in an integer wrap to 0xFFFFFFFF, leading to an out-of-bounds access on the fw id to link sta[] array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.