The Linux kernel's cfg80211_merge_profile() function, responsible for reassembling Multi-BSSID non-transmitted BSS profiles split across multiple MBSSID elements, contained a flaw where loop variables mbssid_elem and sub_elem were not advanced within a while-loop. This caused repeated calls to cfg80211_get_profile_continuation() with the same parameters, resulting in the same data being copied multiple times until a buffer filled. A maliciously crafted beacon exploiting this could cause the kernel to spend up to approximately 2 milliseconds per beacon in this function, leading to excessive CPU usage. The vulnerability has been resolved by advancing the loop variables properly to avoid repeated processing.

The vulnerability can cause the Linux kernel to spend excessive CPU time processing maliciously crafted wifi beacons, potentially degrading system performance. There is no indication of code execution, privilege escalation, or data corruption. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is described as resolved, applying the official Linux kernel updates that include the fix for this issue is recommended once available.