Review reviewHigh

CVE-2026-64515

Linux

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element (MLE) is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original elements. This is incorrect for two reasons: - if the original defragmentation was needed, it will not find the correct data - if the original frame is at a higher address, the parsing will potentially overrun the heap data (though given the layout of the buffers, only into the new defragmentation b...

CVSS: 8.3
EPSS: -
CISA KEV: Not listed
Published: 2026.07.25

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 8.3

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 4d70e9c5488dd57ff5fcabe4d4ecf3d9dd4555ff < 1f573e17bcb7275ddd1c8f47f46ae0faf0e902a4, >= 4d70e9c5488dd57ff5fcabe4d4ecf3d9dd4555ff < 55c479aae99b120489a432db9c717484e523dfd6, >= 4d70e9c5488dd57ff5fcabe4d4ecf3d9dd4555ff < 722b3f86df80644463d29fe5451e30a617f74500, >= 4d70e9c5488dd57ff5fcabe4d4ecf3d9dd4555ff < a74e893f30db64cdce0fc7a96d3baa417bcd55f5, >= 6.9
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CWE: Not available