Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit… (CVE-2026-64506)
Affects linux-hwe-edgeSource GCVE Database
Not known to be exploited : update linux-hwe-edge when convenient.
Data as of 10/24/2026, 17:08:26 UTC
No CVSS score from NVD or the CNA
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
AI-suggested
A fix for this vulnerability has been implemented in the Linux kernel by correcting the drop logic in the rtw89 driver. Users should apply the official Linux kernel updates that include this correction. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the current remediation guidance.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: correct drop logic for malformed AMPDU frames The previous commit aims to fix issue caused by malformed AMPDU frames. But the drop logic fails to deal with the first AMPDU packet paired with certain range of sequence number, and leads to unexpected packet drop. It is more likely to encounter this failure when there are busy traffic during rekey process and could lead to disconnection from the AP. Fix this by adding a initial state judgement and only reset status during pairwise rekey.
Impact
This vulnerability could cause unexpected packet drops in the WiFi driver, leading to potential disconnections from the access point during network rekeying under busy traffic conditions. There is no indication of remote code execution or privilege escalation. The impact is primarily a denial of service in the form of network disconnection.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64506 (opens in a new tab)
- git.kernel.org/stable/c/63ccdfac8677387dfdbd9d4336089e9823280704 (opens in a new tab)
- git.kernel.org/stable/c/994994cfadaf1fd362dea9b8d9d633f85dc1b3c3 (opens in a new tab)
- ubuntu.com/security/CVE-2026-64506 (opens in a new tab)
- cve.org/CVERecord?id=CVE-2026-64506 (opens in a new tab)
- git.kernel.org/linus/63ccdfac8677387dfdbd9d4336089e9823280704 (opens in a new tab)