CVE-2026-64506 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix issue caused by malformed AMPDU frames. But the drop logic fails to deal with the first AMPDU packet paired with certain range of sequence number, and leads to unexpected packet drop. It is more likely to encounter this failure when there are busy traffic during rekey process and could lead to disconnection from the AP. Fix this by adding a initial state judgement and only reset status during pairwise rekey.
A vulnerability in the Linux kernel's WiFi driver RTW89 has been addressed, concerning the handling of malformed AMPDU frames. The issue arose because the drop logic did not properly manage the first AMPDU packet associated with certain sequence number ranges, leading to unintended packet drops. This problem was more likely to occur during busy traffic while rekeying, potentially causing disconnections from the access point. The vulnerability has been fixed by introducing an initial state check and ensuring that the status is only reset during pairwise rekeying.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/63ccdfac8677387dfdbd9d4336089e9823280704 | kernel.org | |
| https://git.kernel.org/stable/c/994994cfadaf1fd362dea9b8d9d633f85dc1b3c3 | kernel.org |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |