In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware… (CVE-2026-64175)
A vulnerability in the Linux kernel's iwlwifi driver for Intel Wi-Fi 7 devices causes excessive CPU usage and memory pressure when the firmware crashes and restarts. The issue arises because the transmit function does not properly stop sending frames during firmware restart, leading to a tight loop of failed transmissions and memory allocation churn. This has been resolved by adding a check to halt transmission during firmware restart, preventing resource exhaustion under high-throughput conditions.
AI Analysis
Technical Summary
The Linux kernel iwlwifi driver mishandles firmware restarts by not stopping transmission queues during the restart process. When the firmware crashes (e.g., on Intel BE201 Wi-Fi 7 hardware), the driver sets a flag indicating hardware restart, but the transmit function continues dequeuing frames and attempting to send them. Since the firmware is non-responsive, transmissions fail immediately, causing a loop of dequeue-send-fail-free operations that waste CPU cycles and cause slab memory fragmentation. The fix adds a guard in the transmit function to stop all transmissions during firmware restart, aligning with existing protections in the receive path and allocation workers. This prevents resource exhaustion and stabilizes operation during firmware recovery.
Potential Impact
Under high-throughput network conditions, such as active UDP or SSH traffic, the vulnerability causes excessive CPU usage and memory pressure due to continuous failed transmission attempts and rapid memory allocation/free cycles. This can degrade system performance and stability on affected Intel Wi-Fi 7 devices running vulnerable Linux kernel versions. There is no indication of direct security compromise or remote code execution from this issue.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add a guard that stops transmission during firmware restart in the iwlwifi driver. Users should update to a Linux kernel version that includes this fix (e.g., kernel 6.19.5 or later where tested). Since this is a kernel-level fix, applying the official kernel update from the distribution or vendor is the recommended remediation. Patch status is not explicitly confirmed in the advisory; users should verify with their Linux distribution's security updates for the official fix.
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware… (CVE-2026-64175)
Description
A vulnerability in the Linux kernel's iwlwifi driver for Intel Wi-Fi 7 devices causes excessive CPU usage and memory pressure when the firmware crashes and restarts. The issue arises because the transmit function does not properly stop sending frames during firmware restart, leading to a tight loop of failed transmissions and memory allocation churn. This has been resolved by adding a check to halt transmission during firmware restart, preventing resource exhaustion under high-throughput conditions.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel iwlwifi driver mishandles firmware restarts by not stopping transmission queues during the restart process. When the firmware crashes (e.g., on Intel BE201 Wi-Fi 7 hardware), the driver sets a flag indicating hardware restart, but the transmit function continues dequeuing frames and attempting to send them. Since the firmware is non-responsive, transmissions fail immediately, causing a loop of dequeue-send-fail-free operations that waste CPU cycles and cause slab memory fragmentation. The fix adds a guard in the transmit function to stop all transmissions during firmware restart, aligning with existing protections in the receive path and allocation workers. This prevents resource exhaustion and stabilizes operation during firmware recovery.
Potential Impact
Under high-throughput network conditions, such as active UDP or SSH traffic, the vulnerability causes excessive CPU usage and memory pressure due to continuous failed transmission attempts and rapid memory allocation/free cycles. This can degrade system performance and stability on affected Intel Wi-Fi 7 devices running vulnerable Linux kernel versions. There is no indication of direct security compromise or remote code execution from this issue.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to add a guard that stops transmission during firmware restart in the iwlwifi driver. Users should update to a Linux kernel version that includes this fix (e.g., kernel 6.19.5 or later where tested). Since this is a kernel-level fix, applying the official kernel update from the distribution or vendor is the recommended remediation. Patch status is not explicitly confirmed in the advisory; users should verify with their Linux distribution's security updates for the official fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6wqh-xprc-m65r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64175"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a82a4a8d598912a58a
Added to database: 07/19/2026, 19:38:16 UTC
Last enriched: 07/19/2026, 19:42:13 UTC
Last updated: 07/20/2026, 11:30:47 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.