The Linux kernel's mac80211 component had a vulnerability where extension frames with unsupported subtypes were not properly filtered before reaching RX processing paths that assume regular 802.11 header layouts. This could lead to incorrect reads of address fields and other header data. The patch drops unsupported extension subtypes early, linearizes S1G beacon frames for safe processing, routes S1G beacons through a dedicated RX path avoiding regular header station lookups, and makes ieee80211_get_bssid() length-safe when returning source addresses. This improves robustness and prevents potential misuse of malformed extension frames.

The vulnerability could cause the kernel to process malformed or unsupported wireless extension frames incorrectly, potentially leading to memory safety issues or logic errors in frame handling. However, no specific exploitation details or impacts such as privilege escalation or denial of service are provided. There are no known exploits in the wild at this time.

A fix has been applied to the Linux kernel to properly validate extension-frame layouts before processing. Users should update to the latest Linux kernel versions that include this patch. Since this is a kernel-level fix, applying official kernel updates from the vendor or distribution is the recommended remediation. No additional mitigation steps are indicated.