CVE-2026-64515
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element (MLE) is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original elements. This is incorrect for two reasons: - if the original defragmentation was needed, it will not find the correct data - if the original frame is at a higher address, the parsing will potentially overrun the heap data (though given the layout of the buffers, only into the new defragmentation buffer, and then it has to stop and fail once that's filled with copied data. Fix it by tracking the container along with the pointer and in doing so also unify the two almost identical defragmentation routines.
Affected versions
Linux kernel versions
6.9
and later are affected. Fixed in
6.12.92,
6.18.34,
7.0.11,
7.1
and their respective stable series.
References
4 totalFrequently asked questions
-
What is CVE-2026-64515?
CVE-2026-64515 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.9 onward and has been patched in 6.12.92, 6.18.34, 7.0.11 and others. CVE-2026-64515 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-64515?
Yes. CVE-2026-64515 has been patched. Fixed versions include 6.12.92, 6.18.34, 7.0.11 and others. If you are running Linux kernel 6.9 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-64515 actively exploited?
No. CVE-2026-64515 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.