CVE-2026-53182 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems() stores the parsed element count in a u8-backed cfg80211_rnr_elems::cnt field and uses that count to size the flexible array allocation. Reject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches 255, before incrementing it again. This keeps the parser aligned with the data structure it fills and matches the existing bound check used by nl80211_parse_mbssid_elems().
A vulnerability in the Linux kernel's wireless subsystem has been addressed, specifically within the nl80211 interface. The issue arose in the RNR (Resource Negotiation Response) element parsing for EMA (Enhanced Multi-User Access) Access Points. The parser did not properly limit the number of nested RNR elements, which could lead to memory allocation issues. The vulnerability is present in several versions of the Linux kernel.
Users can upgrade to the latest stable version of the Linux kernel, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/265c07c09c837621730d35f02975207a1224bf05 | kernel.org | Patch |
| https://git.kernel.org/stable/c/30c3fa80f423613efdda3deca4af52ff7d20e4e2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4cd92957e8f8cc4ebfe8a5d4203c14c592fde6b1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/688fcac7054abc680c0eef753f2bb772cfaf8cf7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ecbf3c45add30a0857414e156bdb9c79906f0ff6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fc0ec2fc02dfe52c5821f36fbccf6a45df43f508 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.160, < 6.1.176 >= 6.4, < 6.6.143 >= 6.7, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 25, 2026 | New CVE Received | kernel.org |