CVE-2026-64037
A bug in the Linux kernel’s iwlwifi MLD driver can cause the system to generate thousands of tiny packets when AMSDU is disabled, flooding the network stack and potentially corrupting memory. This can lead to crashes or other unpredictable behavior.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users running affected versions of the iwlwifi MLD driver, typically those with Intel wireless hardware on older kernel releases.
Real-world impact
An attacker could trigger a denial‑of‑service by causing the system to crash or corrupt memory, and the memory corruption could be leveraged for further exploitation.
Why this severity
The CVSS score of 9.8 reflects that the flaw is exploitable over the network, requires no authentication or user interaction, and can completely compromise confidentiality, integrity, and availability.
What to do about it
- 01Update your Linux kernel to a version that includes the iwlwifi MLD driver patch.
- 02Reboot the system to load the updated kernel.
NVD description indicates official fix
Timeline
- Jul 19, 2026 · 14d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 20, 2026 · 13d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 30, 2026 · 3d agoAdvisory updatedThe NVD record was last revised.