SB2026072044 - Always-Incorrect Control Flow Implementation in Linux kernel iwlwifi mvm driver

Description

This security bulletin contains information about 1 vulnerability.

1) Always-Incorrect Control Flow Implementation (CVE-ID: CVE-2026-64176)

CWE-ID: CWE-670 - Always-Incorrect Control Flow Implementation

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to incorrect rate encoding in the iwlwifi mvm TX rate handling code when processing transmit rate settings on older devices. A local user can trigger use of malformed TX_CMD rate values to cause a denial of service.

The issue affects older devices that still use version 1 rate encoding, and firmware may assert or crash when handling beacon rates.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/6b58a79f2cd98156856eb49e8b55db5facdd7e6d
• https://git.kernel.org/stable/c/6fe92651b44fd3cfc8dcfdaad0e82885c384dada
• https://git.kernel.org/stable/c/fb84b5cbcaab3ca0f4e961d92a40ed7f3aac483b