CVE-2026-46152

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rx_result ieee80211_invoke_fast_rx() is documented as safe for parallel RX, but its per-invocation rx_result is declared static. Concurrent callers then share one instance and can overwrite each other's result between ieee80211_rx_mesh_data() and the switch on res. That can make a packet that was queued or consumed by ieee80211_rx_mesh_data() fall through into ieee80211_rx_8023(), or make a packet that should continue return as queued. Make res an automatic variable so each invocation keeps its own result.

Affected products

Linux Kernel, Rocky Linux, Ubuntu, Opensuse Tumbleweed

Linux Linux Kernel

< 6.6.140, 6.12.88, 6.18.30, 7.0.7, 7.1

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.2% (6th percentile)

Weakness

CWE-1058

NVD status

Modified

Published

2026-05-28

No exploit for CVE-2026-46152 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.