Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used with the radiotap namespace (not with vendor namespaces), but if the undefined field 18 is used, the alignment/size is unknown as well. In this case, iterator->_next_ns_data isn't initialized (it's only set for skipping vendor namespaces), and syzbot points out that we later compare against this uninitialized value. Fix this by moving the rejection of unknown radiotap fields down to after the in-namespace lookup, so it will really use iterator->_next_ns_data only for vendor namespaces, even in case undefined fields are present.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | General1 |
| 2026-03-27 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-23367 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23367 #CVE-2026-23367 #CVE #CyberSecurity #InfoSec https://t.co/xy0zzOJSif
Post summary
This tweet announces CVE‑2026‑23367 with minimal information and links to the NVD entry, but offers no further technical, exploit, or mitigation details.
🚨 Even Linux parser bug fixes can faceplant: “just reject malformed input” still left uninitialized state and crash logic. Reliability > vibes, folks. This matters for Wi‑Fi stability. https://windowsforum.com/threads/cve-2026-23367-fixing-uninitialized-state-in-linux-radiotap-wi-fi-parser.407443/ #LinuxKernel #WiFiSecurity #RadiotapParser #Mac80211 https://t.co/sz1BO38HHN
Post summary
The post comments that a recent fix for the Linux Wi‑Fi parser (CVE‑2026‑23367) still leaves an uninitialized state and crash logic, indicating that malformed input is not fully rejected and causing reliability issues.
CVE-2026-23367 In the Linux kernel, the following vulnerability has been resolved: wifi: radiotap: reject radiotap with unknown bits The radiotap parser is currently only used wit… https://www.cve.org/CVERecord?id=CVE-2026-23367
Post summary
CVE-2026-23367, a Linux kernel radiotap parsing flaw, has been patched according to the vendor advisory; no exploitation or PoC information is mentioned.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 2.6.34 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |