CVE-2026-23279 — NULL Pointer Dereference in Linux
Severity
6.5MEDIUM
No vectorEPSS
0.1%
top 69.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
In mesh_rx_csa_frame(), elems->mesh_chansw_params_ie is dereferenced
at lines 1638 and 1642 without a prior NULL check:
ifmsh->chsw_ttl = elems->mesh_chansw_params_ie->mesh_ttl;
...
pre_value = le16_to_cpu(elems->mesh_chansw_params_ie->mesh_pre_value);
The mesh_matches_local() check above only validates the Mesh ID,
Mesh Configuration, and Supported Rates IE…
Affected Packages5 packages
▶CVEListV5linux/linux8f2535b92d685c68db4bc699dd78462a646f6ef9 — 2b5f282b1b7241ef624c3399a1cdff0bb1a3eeab+6
🔴Vulnerability Details
3GHSA▶
GHSA-3969-jvq7-cjf4: In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
In mesh_rx_c↗2026-03-25
OSV▶
CVE-2026-23279: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa↗2026-03-25
📋Vendor Advisories
3Debian▶
CVE-2026-23279: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80...↗2026