VulnSocial

CVE-2026-43052Disclosure(linux / linux_kernel)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

linux CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
linux
Products
linux_kernel

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-11: 1Technical Details · 2026-05-11: 105-11
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • WindowsForum@windowsforum
    Disclosure

    🛜 CVE-2026-43052 is Linux-only, but “local Wi‑Fi privilege shenanigans” still matters to Windows fleets: if a shared device/router gets owned, laterally moving to Windows gets way easier. https://windowsforum.com/threads/cve-2026-43052-linux-wi-fi-mac80211-tdls-high-local-risk-for-windows-fleets.417425/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernelSecurity #Mac80211Tdls #Cve202643052 https://t.co/aC2Hk5wf9r

    Post summary

    The post discusses CVE‑2026‑43052 as a Linux‑only local Wi‑Fi privilege issue that can facilitate lateral movement to Windows fleets, but it does not provide PoC, exploit, or patch details.

    0000028
    1.1K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities