Wi-Fi HE/EHT Capability Consistency Flaw in Linux Kernel

Publication date: 2026-06-25

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency Xiang Mei reports that mac80211 could crash if eht_cap is set but eht_oper isn't. Rather than fixing that for the individual user(s), enforce that both HE/EHT have consistent elements.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-25

Last Modified

2026-07-08

Generated

2026-07-15

AI Q&A

2026-06-25

EPSS Evaluated

2026-07-14

NVD

CVE-2026-53257

EUVD

EUVD-2026-39208

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.16 (inc) to 7.0.13 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's wifi component, specifically in the cfg80211 and mac80211 modules. The issue occurs when the HE/EHT capabilities and operational elements are inconsistent; for example, if eht_cap is set but eht_oper is not, it can cause the mac80211 module to crash. The fix enforces consistency between HE and EHT capability and operational elements to prevent such crashes.

Impact Analysis

If this vulnerability is present, it could cause the mac80211 module in the Linux kernel to crash when there is an inconsistency between HE/EHT capability and operational settings. This could lead to wifi instability or loss of connectivity on affected systems.

Hi! I’m here to help you understand CVE-2026-53257. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70