SB2026050967 - Improper input validation in Linux kernel iwlwifi mvm driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper input validation (CVE-ID: CVE-2026-43325)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper feature support validation in the iwlwifi mvm subsystem when handling 6E-related commands. A local user can trigger use of an unsupported MCC_ALLOWED_AP_TYPE_CMD path to cause a denial of service.

The issue occurs because some firmware incorrectly advertises support for the command on AX201 devices that do not support 6E, which can lead to a firmware crash.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/323156c3541e23da7e582008a7ac30cd51b60acd
• https://git.kernel.org/stable/c/6607d0e58ceca997816122568ce54db9e134edab
• https://git.kernel.org/stable/c/c0b3fa5e0eaecd38e6a9f8f78e86f468fbde719a