High 7.1Published May 1, 2026

CVE-2026-43052wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Updated under an hour ago (Oct 26, 2026, 7:23 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

CVSS: 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before e602246235fc2ef06c39b2e9cf147d84d0896b73; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 6813a8b1b240756dad4375f3e020ce10e4e3871b; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 44839ea7e96b3659a1606f3d5267063135479b7c; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before ba5b43db126a5e7378553869e3f7954d9187349f; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before 8148c2fda4ebb17104a573649c9b699208ad10ee; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before be81f17151fcb8546a95f35ca8f4231b065985de; from 941c93cd039852b7ab02c74f4698c99d82bd6cfe before e77b2937aaa20264e4bd699d3244bdb50e7e3343; 941c93cd039852b7ab02c74f4698c99d82bd6cfe builds before 7d73872d949c488a1d7c308031d6a9d89b5e0a8b	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.2 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/e602246235fc2ef06c39b2e9cf147d84d0896b73
https://git.kernel.org/stable/c/6813a8b1b240756dad4375f3e020ce10e4e3871b
https://git.kernel.org/stable/c/44839ea7e96b3659a1606f3d5267063135479b7c
https://git.kernel.org/stable/c/ba5b43db126a5e7378553869e3f7954d9187349f
https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee	patch
https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de	patch
https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343	patch
https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.