High severity · published May 1, 2026
CVE-2026-43052
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
7.1
CVSS
0.1%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
3.2 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; 7.0; 7.0; +1 more · source: NVD
LI
Linux · Linux
941c93cd039852b7ab02c74f4698c99d82bd6cfe before e602246235fc2ef06c39b2e9cf147d84d0896b73; 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 6813a8b1b240756dad4375f3e020ce10e4e3871b; 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 44839ea7e96b3659a1606f3d5267063135479b7c; 941c93cd039852b7ab02c74f4698c99d82bd6cfe before ba5b43db126a5e7378553869e3f7954d9187349f; 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 8148c2fda4ebb17104a573649c9b699208ad10ee; 941c93cd039852b7ab02c74f4698c99d82bd6cfe before be81f17151fcb8546a95f35ca8f4231b065985de; +3 more · source: vendor