Search: CVE-2026-23396

A NULL pointer dereference vulnerability in the Linux kernel's mac80211 wireless subsystem was fixed. The function mesh_matches_local() did not check for a NULL mesh_config pointer when called from mesh_rx_csa_frame(), allowing an adjacent attacker to cause a kernel crash by sending a crafted CSA action frame missing the Mesh Configuration IE. This issue leads to a denial of service via kernel crash. A patch adding a NULL check was released to address this.