The Linux kernel's ieee80211_mle_common_size() function used the first common-info octet as the length for all known MLE types, but ieee80211_mle_size_ok() only validated this length for Basic, Probe Request, and TDLS MLEs. Reconfiguration MLEs skipped the length octet when calculating minimum common size, and Priority Access MLEs skipped validation of the advertised common information length. The vulnerability was addressed by accounting for the Reconfiguration common-info length octet and validating the advertised common information length for all known MLE types, removing misleading comments in the code. Unknown MLE type handling remains unchanged.

Improper validation of the MLE common information length could potentially lead to incorrect processing of wifi management frames within the Linux kernel's ieee80211 subsystem. The exact impact is not detailed in the provided information, and no known exploits in the wild have been reported. Without a CVSS score or detailed impact description, the severity is assessed based on the nature of the validation flaw in a kernel subsystem.

A fix has been implemented in the Linux kernel to properly validate the MLE common information length for all known MLE types. Users and administrators should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, verify with the official Linux kernel advisories or repositories for the relevant patch or update.