CVE-2026-53257
Received Received - Intake
Wi-Fi HE/EHT Capability Consistency Flaw in Linux Kernel

Publication date: 2026-06-25

Last updated on: 2026-06-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency Xiang Mei reports that mac80211 could crash if eht_cap is set but eht_oper isn't. Rather than fixing that for the individual user(s), enforce that both HE/EHT have consistent elements.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-25
Last Modified
2026-06-25
Generated
2026-06-25
AI Q&A
2026-06-25
EPSS Evaluated
N/A
NVD
CVE-2026-53257
EUVD
EUVD-2026-39208
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's wifi component, specifically in the cfg80211 and mac80211 modules. The issue occurs when the HE/EHT capabilities and operational elements are inconsistent; for example, if eht_cap is set but eht_oper is not, it can cause the mac80211 module to crash. The fix enforces consistency between HE and EHT capability and operational elements to prevent such crashes.

Impact Analysis

If this vulnerability is present, it could cause the mac80211 module in the Linux kernel to crash when there is an inconsistency between HE/EHT capability and operational settings. This could lead to wifi instability or loss of connectivity on affected systems.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53257. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart