CVE-2026-46152

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-46152
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46152.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-46152
Downstream
Related
Published
2026-05-28T09:36:08.211Z
Modified
2026-06-23T15:29:20.909361128Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
wifi: mac80211: drop stray 'static' from fast-RX rx_result
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: drop stray 'static' from fast-RX rx_result

ieee80211invokefastrx() is documented as safe for parallel RX, but its per-invocation rxresult is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211rxmesh_data() and the switch on res.

That can make a packet that was queued or consumed by ieee80211rxmeshdata() fall through into ieee80211rx_8023(), or make a packet that should continue return as queued.

Make res an automatic variable so each invocation keeps its own result.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46152.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3468e1e0c639032a603450f0830ccabfa76f5806
Fixed
03584528bfffb195e384698af9148b94e42e3f14
Fixed
1739fc31b4de06c5c78ce0741182770fb079091e
Fixed
e131562d6f2b958148c35c98831b007f47f0e3d3
Fixed
3ef44f96ccc3e06e059dec57842e366f0c4b1893
Fixed
7a5b81e0c87a075afd572f659d8eb68c9c4cd2ba

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46152.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.140
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.88
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.30
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46152.json"