CVE-2026-64176

Received Received - Intake

Incorrect TX Rate Handling in Linux Kernel iwlwifi Driver

Publication date: 2026-07-19

Last updated on: 2026-07-20

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index (0-3/0-7) but rather their PLCP value (e.g. 10 for 1 Mbps CCK rate.) While introducing v3 rates, I changed the driver from internally handling v1 rates and converting to v2, to internally handling v3 and converting to v1 or v2 according to the firmware. I accordingly changed the code in iwl_mvm_mac80211_idx_to_hwrate() to no longer have different values for different APIs. This was correct. However, I later reverted this part of the change, because it was reported that I had broken beacon rates, causing a FW assert/crash. This caused TX_CMD rates to be set incorrectly, potentially causing a warning when reported back from the device as having been used. Fix this (hopefully correctly now) by handling beacon rates in the TX_CMD that's embedded in the beacon template command separately. Restore iwl_mvm_mac80211_idx_to_hwrate() to return only the rate index, not PLCP value, fixing the real TX_CMD.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-07-20

Generated

2026-07-20

AI Q&A

2026-07-19

EPSS Evaluated

N/A

NVD

CVE-2026-64176

EUVD

EUVD-2026-45861

Affected Vendors & Products

Vendor	Product	Version / Range
intel	iwlwifi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel affects the iwlwifi driver for Intel Wi-Fi devices, specifically older models like the 7265D. It involves incorrect handling of TX rates where the driver was changed to convert rates to a newer format but was later reverted due to issues with beacon rates causing firmware crashes. This led to TX_CMD rates being set incorrectly, potentially triggering warnings when the device reports back the used rates.

Detection Guidance

This vulnerability is specific to the Linux kernel's iwlwifi driver for Intel wireless devices. Detection requires checking the kernel version and iwlwifi driver version for the affected code. Use commands like 'uname -a' to check kernel version and 'modinfo iwlwifi' to inspect the driver version.

Impact Analysis

This vulnerability may cause Wi-Fi connectivity issues or instability on affected Intel Wi-Fi devices. It could lead to incorrect rate settings during data transmission, potentially causing performance degradation or unexpected disconnections. Users might experience warnings or errors related to Wi-Fi operations.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a driver-level issue in the Linux kernel's iwlwifi module for WiFi devices. It involves incorrect TX rate settings on older devices, which may cause firmware warnings but does not involve data exposure or privacy concerns typical of compliance violations.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-64176. Monitor Intel's advisories for iwlwifi driver updates and apply them promptly. If using affected devices like 7265D, ensure firmware is updated as well.

Hi! I’m here to help you understand CVE-2026-64176. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70