The Linux kernel’s mac80211 wireless subsystem contains a logic flaw in the TDLS (Tunneled Direct Link Setup) handling. The function responsible for operating a TDLS peer, ieee80211_tdls_oper(), incorrectly allows operations on the access point station as if it were a TDLS peer. This oversight can cause misleading warnings when the access point is later removed or when the system erroneously treats the AP as a TDLS client. The absence of proper peer verification can lead to erratic behavior of the wireless interface, potentially impacting network stability and local device connectivity.

The vulnerability applies to all Linux kernel releases that include the mac80211 stack prior to the application of the fix. The affected code resides in the generic wireless driver core, so any distribution or custom build that ships without the updated patch is vulnerable. Specific product versions are not enumerated in the available data.

Because the issue requires interaction with the TDLS protocol, the attack vector is likely local or shared over a wireless LAN where a malicious client can initiate TDLS sessions with the victim. The EPSS score of < 1% indicates a very low probability of exploitation. The CVSS score of 5.5 categorizes the vulnerability as medium severity. The problem can provoke repeated warning logs and may destabilize the wireless interface, leading to service disruption. The vulnerability is not listed in the CISA KEV catalog, indicating it has not been observed exploited in the wild to date. However, its potential to cause denial of service warrants attention, especially for environments that rely on TDLS for high‑performance direct links.