What is CVE-2026-64255?

CVE-2026-64255 is a unscored severity Linux kernel vulnerability. CVE-2026-64255 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64255?

CVE-2026-64255 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-64255?

Yes, CVE-2026-64255 has been patched. Fixed versions include 6.18.38, 7.1.3 and 7.2-rc1.

Is CVE-2026-64255 actively exploited?

CVE-2026-64255 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64255

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().

Package Linux Kernel

Published 2026-07-24

Last modified 2026-07-24

Patch available

Yes

Affected versions

Fixed in 6.18.38, 7.1.3, 7.2-rc1 and their respective stable series.

Fixed in

✓ 6.18.38 6.18.x ✓ 7.1.3 7.1.x ✓ 7.2-rc1

References

3 total

Frequently asked questions

What is CVE-2026-64255?

CVE-2026-64255 is a unscored severity Linux kernel vulnerability . CVE-2026-64255 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-64255?

Yes. CVE-2026-64255 has been patched. Fixed versions include 6.18.38, 7.1.3 and 7.2-rc1.
Is CVE-2026-64255 actively exploited?

No. CVE-2026-64255 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.