Medium 5.5Published May 8, 2026

CVE-2026-43325wifi: iwlwifi: mvm: don't send a 6E related command when not supported

Updated under an hour ago (Oct 26, 2026, 12:23 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6E support. Do not send it if the device doesn't support 6E. Apparently, the firmware is mistakenly advertising support for this command even on AX201 which does not support 6E and then the firmware crashes.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0d2fc8821a7d667180ce27732697105db843a1b9 before c0e380109984e5499b969230131a3e80efc1613f; from 0d2fc8821a7d667180ce27732697105db843a1b9 before c0b3fa5e0eaecd38e6a9f8f78e86f468fbde719a; from 0d2fc8821a7d667180ce27732697105db843a1b9 before 6607d0e58ceca997816122568ce54db9e134edab; from 0d2fc8821a7d667180ce27732697105db843a1b9 before 323156c3541e23da7e582008a7ac30cd51b60acd	CNA record
linux linux_kernel linux:linux_kernel	from 6.9 before 6.18.22; from 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; and 1 more ranges	NVD

References

https://git.kernel.org/stable/c/c0e380109984e5499b969230131a3e80efc1613f
https://git.kernel.org/stable/c/c0b3fa5e0eaecd38e6a9f8f78e86f468fbde719apatch
https://git.kernel.org/stable/c/6607d0e58ceca997816122568ce54db9e134edabpatch
https://git.kernel.org/stable/c/323156c3541e23da7e582008a7ac30cd51b60acdpatch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.