https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 05:50:34 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46152 <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: drop stray &#39;static&#39; from fast-RX rx_result</p> <p>ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other&#39;s result between ieee80211_rx_mesh_data() and the switch on res.</p> <p>That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued.</p> <p>Make res an automatic variable so each invocation keeps its own result.</p> <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mac80211: drop stray &#39;static&#39; from fast-RX rx_result</p> <p>ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other&#39;s result between ieee80211_rx_mesh_data() and the switch on res.</p> <p>That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued.</p> <p>Make res an automatic variable so each invocation keeps its own result.</p> https://vulnerability.circl.lu/vuln/cve-2026-46152