High severity7.8NVD Advisory· Published Jun 25, 2026· Updated Jul 6, 2026
CVE-2026-53182
CVE-2026-53182
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject oversized EMA RNR lists
nl80211_parse_rnr_elems() stores the parsed element count in a u8-backed cfg80211_rnr_elems::cnt field and uses that count to size the flexible array allocation.
Reject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches 255, before incrementing it again. This keeps the parser aligned with the data structure it fills and matches the existing bound check used by nl80211_parse_mbssid_elems().
Affected products
110- osv-coords102 versionspkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/linux-gcp-6.12pkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-rt-develpkg:apk/chainguard/linux-qemu-6.18pkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-modules-extrapkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installedpkg:apk/chainguard/linux-gcp-6.18pkg:apk/chainguard/linux-gcp-6.18-bootc-boot-installedpkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/kernel-debug-modules-corepkg:apk/chainguard/linux-aws-6.18pkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/python3-perfpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/perfpkg:rpm/almalinux/rvpkg:rpm/almalinux/libperfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-tools-libspkg:apk/chainguard/linux-vmware-6.12pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/linux-aws-6.12pkg:apk/chainguard/linux-azure-6.18pkg:apk/chainguard/linux-qemu-melangepkg:linux/kernelpkg:apk/chainguard/linux-qemu-6.12pkg:apk/chainguard/linux-vmware-6.18pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-tools
< 6.12.0-160000.37.1+ 101 more
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.95-r0
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.95-r0
- (no CPE)range: < 6.12.0-160000.37.1.160000.2.19
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 4.18.0-553.163.1.el8_10
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.95-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.1.176
- (no CPE)range: < 6.12.95-r0
- (no CPE)range: < 6.18.38-r0
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
- (no CPE)range: < 6.12.0-211.53.1.el10_2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.1.160,<6.1.176
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/265c07c09c837621730d35f02975207a1224bf05nvdPatch
- git.kernel.org/stable/c/30c3fa80f423613efdda3deca4af52ff7d20e4e2nvdPatch
- git.kernel.org/stable/c/4cd92957e8f8cc4ebfe8a5d4203c14c592fde6b1nvdPatch
- git.kernel.org/stable/c/688fcac7054abc680c0eef753f2bb772cfaf8cf7nvdPatch
- git.kernel.org/stable/c/ecbf3c45add30a0857414e156bdb9c79906f0ff6nvdPatch
- git.kernel.org/stable/c/fc0ec2fc02dfe52c5821f36fbccf6a45df43f508nvdPatch
News mentions
0No linked articles in our index yet.