CVE-2026-80722

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mac80211 component where the ieee80211 process rx twt action() function only partially validates received S1G TWT setup frames before queueing them. This allows an individual agreement to reach ieee80211 s1g rx twt setup() with a twt->length that is too short for the full ieee80211 twt params structure. Consequently, the drv add twt setup() function, along with the associated tracepoint and driver callback, may consume the complete parameters block despite the insufficient length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.