SB2026072755 - Race condition in Linux kernel realtek rtw89 driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-64506)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper state management in the rtw89 wifi driver AMPDU frame handling logic when processing malformed AMPDU frames. A remote attacker can send malformed AMPDU frames to cause a denial of service.

It is more likely to be triggered during busy traffic conditions while pairwise rekey is in progress, and may cause disconnection from the access point.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/63ccdfac8677387dfdbd9d4336089e9823280704
• https://git.kernel.org/stable/c/994994cfadaf1fd362dea9b8d9d633f85dc1b3c3