Microsoft Security Response Center guidance
Vendor revision: Oct 21, 2026Release Notes
Vulnerability intelligence
CVE-2026-97511. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: avoid out-of-bounds access in monitor
In NAN, we don't know on what band the frame will be sent. Therefore we set info->band to NUM_NL80211_BANDS.
However, this leads to out-of-bound access in ieee80211_add_tx_radiotap_header when we try to access the sbands array.
Fix it by not accessing the array if the band is NUM_NL80211_BANDS. This means that we will not report rate info for legacy rate in NAN.
But nobody really cares about it.
Source: NVD