Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such… (CVE-2026-64176)

The Linux kernel's iwlwifi driver for older devices (e.g., 7265D) used a version 1 rate encoding format that differs from newer versions. A change to handle version 3 rates internally caused incorrect TX_CMD rate settings after a partial revert of the change, leading to potential warnings or firmware crashes. This vulnerability (CVE-2026-64176) was resolved by correctly handling beacon rates in the TX_CMD embedded in the transmission path. The issue affects multiple Ubuntu kernel package versions prior to 7.0.0-28.28~24.04.1 and similar versions. The CVSS 3.1 vector is AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H, indicating an attacker with adjacent network access can cause high confidentiality loss and high availability impact without privileges or user interaction. The vendor advisory confirms a patch is available and recommends updating to fixed kernel versions.

An attacker with adjacent network access could exploit this vulnerability to cause high confidentiality loss and high availability impact on affected systems by triggering incorrect TX rate settings in the Wi-Fi driver, potentially leading to firmware warnings or crashes. There is no reported integrity impact. No known exploits in the wild have been reported. The vulnerability affects older Wi-Fi devices using the iwlwifi driver with specific rate encoding formats.

A patch is available and should be applied by updating the Linux kernel to the fixed versions provided by the vendor. For Ubuntu 26.04 LTS, update to kernel versions 7.0.0-1008.8 or later as specified in the advisory. After updating, a system reboot is required. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. Follow the vendor's update instructions carefully to ensure full remediation.