An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCanonical Ubuntu
OSCanonical14.0416.0418.04Debian
OSDebian8.09.0Linux Kernel
OSLinux< 5.3Netapp 8300
HWNetappall versionsNetapp 8300 Firmware
OSNetappall versionsNetapp 8700
HWNetappall versionsNetapp 8700 Firmware
OSNetappall versionsNetapp A400
HWNetappall versionsNetapp A400 Firmware
OSNetappall versionsNetapp A700s
HWNetappall versionsNetapp A700s Firmware
OSNetappall versionsNetapp Active Iq Unified Manager
APPNetappall versionsNetapp Cloud Backup
APPNetappall versionsNetapp Data Availability Services
APPNetappall versionsNetapp E Series Santricity Os Controller
APPNetapp11.0.0 – 11.70.1Netapp H610s
HWNetappall versionsNetapp H610s Firmware
OSNetappall versionsNetapp Hci Management Node
APPNetappall versionsNetapp Solidfire
APPNetappall versionsNetapp Steelstore Cloud Integrated Storage
APPNetappall versionsOracle Sd Wan Edge
APPOracle8.2
Related vulnerabilities
GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)
RCE przez deserializację PHP w Roundcube Webmail (parametr _from)
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP