DEBIAN-CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element (control & 0x000f), so it can be 0..15. linkremovaltimeout[] has IEEE80211MLDMAXNUMLINKS (15) elements, so index 15 is out-of-bounds. Skip subelements with linkid >= IEEE80211MLDMAXNUM_LINKS to avoid a stack out-of-bounds write.
Package Versions Affected
Automatically patch vulnerabilities without upgrading
CVSS Version



Related Resources
References
https://security-tracker.debian.org/tracker/CVE-2026-23246
