Description
In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: fix potential zero beacon interval in beacon tracking

During fuzz testing, it was discovered that bss_conf->beacon_int
might be zero, which could result in a division by zero error in
subsequent calculations. Set a default value of 100 TU if the
interval is zero to ensure stability.
Published: 2026-05-06
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a potential division‑by‑zero error in the Linux kernel’s rtw89 Wi‑Fi driver when processing beacon frames whose interval field is zero. If an attacker can cause the driver to encounter a zero beacon interval during beacon tracking, the driver’s calculation that divides by this value can abort the kernel, leading to a crash and a loss of system availability. The upstream patch assigns a default interval of 100 time units when the reported interval is zero, thereby preventing the fault and restoring normal operation.

Affected Systems

This issue affects Linux kernel builds that include the rtw89 driver for Realtek 8xxN series Wi‑Fi adapters. The CNA record lists the generic Linux kernel, and the patch reference indicates it applies to all kernel versions that ship the driver. Because no specific kernel release or firmware revision is given, any kernel that loads the rtw89 module and has not applied the fix may be vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates a medium impact, while the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, so there are no confirmed public exploits as of the current data. An attacker would need to be within transmission range of the machine and able to manipulate or spoof beacon frames, a scenario that could occur in a Wi‑Fi environment or via a rogue access point. Consequently, the risk is moderate but should be mitigated promptly to avoid a system crash.

Generated by OpenCVE AI on May 8, 2026 at 22:38 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a release that includes the rtw89 driver fix, or apply the upstream patch referenced in the advisory to the source tree and rebuild the kernel module.
  • If a kernel upgrade is not immediately feasible, download the relevant patch, apply it to the driver source, recompile the module, and reinstall it so the patched driver is loaded on the next boot.
  • While awaiting a kernel update or module rebuild, disable or remove the Realtek 8xxN Wi‑Fi adapter, or temporarily blacklist the rtw89 driver to stop beacon processing until the fix is active, then reboot to load the patched version.

Generated by OpenCVE AI on May 8, 2026 at 22:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 08 May 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Thu, 07 May 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate


Wed, 06 May 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-369

Wed, 06 May 2026 12:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, it was discovered that bss_conf->beacon_int might be zero, which could result in a division by zero error in subsequent calculations. Set a default value of 100 TU if the interval is zero to ensure stability.
Title wifi: rtw89: fix potential zero beacon interval in beacon tracking
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-11T22:21:15.288Z

Reserved: 2026-05-01T14:12:55.997Z

Link: CVE-2026-43267

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-05-06T12:16:47.810

Modified: 2026-05-08T21:03:42.570

Link: CVE-2026-43267

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-05-06T00:00:00Z

Links: CVE-2026-43267 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-08T22:45:05Z

Weaknesses