ZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerability
ZDI-26-691: integer overflow in Linux kernel netlink wireless configuration (CVE-2026-53182) allows local privilege escalation by attackers already running high-privileged code; CVSS 8.2.
ZDI advisory ZDI-26-691 discloses an integer overflow in the Linux kernel's netlink-based wireless configuration that allows local attackers to escalate privileges on affected installations. Exploitation requires the attacker to first obtain the ability to execute high-privileged code on the target system. ZDI assigned a CVSS rating of 8.2 and CVE-2026-53182.
- Integer overflow in Linux kernel netlink-based wireless configuration
- Local attackers can escalate privileges
- Requires prior ability to execute high-privileged code
- CVE-2026-53182 assigned; CVSS 8.2
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-53182 | In the Linux kernel, the following vulnerability has been resolved: In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject oversized EMA RNR lists nl80211_parse_rnr_elems() stores the parsed element count in a u8-backed cfg80211_rnr_elems::cnt field and uses that count to size the flexible array allocation. Reject nested NL80211_ATTR_EMA_RNR_ELEMS input once the count reaches 255, before incrementing it again. This keeps the parser aligned with the data structure it fills and matches the existing bound check used by nl80211_parse_mbssid_elems(). NVD description · AI analysis pending | 7.8 | <1% |
| — |
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-53182.
This source does not provide full text. Read it at zerodayinitiative.com.