The Linux kernel’s mac80211 wireless stack contains a logic flaw in the handling of the NL80211_TDLS_ENABLE_LINK command. The code checks only for the existence of a station but fails to verify that the station is actually a TDLS peer. This omission allows the operation to proceed for non‑TDLS stations, inadvertently triggering side effects such as modifying the channel context and HT protection before the operation ultimately fails. The result is unintended changes to the wireless configuration that can degrade connectivity, inject misconfiguration, or expose the device to fragile network states. This flaw is an internal kernel issue and does not involve direct remote code execution, but it presents an integrity and availability risk for devices running the affected kernel.

Linux kernel installations that use the mac80211 Wi‑Fi subsystem without the patch that adds a proper TDLS flag check. Any kernel release predating the fix is considered vulnerable. Both major and minor distributions that ship standard Linux kernels are included, as the issue sits inside the kernel itself, not in a distribution‑specific module.

The vulnerability requires an attacker to send a netlink command (NL80211_TDLS_ENABLE_LINK) targeting a non‑TDLS station, a capability normally limited to users with sufficient privilege to interact with wireless devices. Because the EPSS score is <1% and the vulnerability is not listed in CISA KEV, the public likelihood of exploitation is uncertain. Nonetheless, the flaw can lead to denial of service or subtle mis‑configuration in wireless environments, and it may be exploited by adversaries seeking to destabilize network access on compromised Linux machines. The CVSS score of 7.1 reflects a medium‑to‑high severity assessment of the identified issue.