The Linux kernel's wifi mac80211 subsystem had a vulnerability (CVE-2026-64515) in the handling of multi-link elements (MLE) during defragmentation. When either reconf or EPCS MLE was present in a non-transmitted profile, the defragmentation routine was called with a pointer to the defragmented copy but referenced the original elements incorrectly. This caused two problems: the defragmentation might not find the correct data, and if the original frame was at a higher memory address, parsing could overrun heap data into the new defragmentation buffer, potentially causing memory corruption. The issue was fixed by tracking the container alongside the pointer and merging two similar defragmentation routines to prevent this incorrect behavior.

The vulnerability could lead to heap memory overruns during wifi frame parsing in the mac80211 component of the Linux kernel. This may cause memory corruption, which could potentially be exploited to cause denial of service or other unintended behavior. However, no known exploits in the wild have been reported.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to remediate the issue. Since no cloud service is involved, remediation depends on applying the updated kernel versions. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories for the exact fixed versions and update accordingly.