{"api_version":"1","generated_at":"2026-10-01T21:57:57+00:00","cve":"CVE-2026-97517","urls":{"html":"https://cve.report/CVE-2026-97517","api":"https://cve.report/api/cve/CVE-2026-97517.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-97517","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-97517"},"summary":{"title":"wifi: nl80211: reject beacons with bad HE operation","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject beacons with bad HE operation\n\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-09-24 17:17:29","updated_at":"2026-09-28 06:16:37"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768","name":"https://git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50","name":"https://git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900","name":"https://git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97517","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97517","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 6c4bb5450b9d9111faaaba581ea45a3a79844e50 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 0d635f0b4a634eb599ed13a87ece0b5f129f9900 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 7e8d6f12bb2a729290ebb0096248ea46d2868fc6 8b9a100e1a76c52988b31099b349fd95a58c8768 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.7","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.7 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.111 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.53 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"97517","cve":"CVE-2026-97517","epss":"0.001550000","percentile":"0.039110000","score_date":"2026-09-29","updated_at":"2026-09-30 00:11:23"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/wireless/nl80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6c4bb5450b9d9111faaaba581ea45a3a79844e50","status":"affected","version":"7e8d6f12bb2a729290ebb0096248ea46d2868fc6","versionType":"git"},{"lessThan":"0d635f0b4a634eb599ed13a87ece0b5f129f9900","status":"affected","version":"7e8d6f12bb2a729290ebb0096248ea46d2868fc6","versionType":"git"},{"lessThan":"8b9a100e1a76c52988b31099b349fd95a58c8768","status":"affected","version":"7e8d6f12bb2a729290ebb0096248ea46d2868fc6","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["net/wireless/nl80211.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.111","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.53","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.111","versionStartIncluding":"5.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.53","versionStartIncluding":"5.7","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","versionStartIncluding":"5.7","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject beacons with bad HE operation\n\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this."}],"providerMetadata":{"dateUpdated":"2026-09-28T05:30:54.602Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/6c4bb5450b9d9111faaaba581ea45a3a79844e50"},{"url":"https://git.kernel.org/stable/c/0d635f0b4a634eb599ed13a87ece0b5f129f9900"},{"url":"https://git.kernel.org/stable/c/8b9a100e1a76c52988b31099b349fd95a58c8768"}],"title":"wifi: nl80211: reject beacons with bad HE operation","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-97517","datePublished":"2026-09-24T16:05:16.009Z","dateReserved":"2026-09-24T16:01:01.152Z","dateUpdated":"2026-09-28T05:30:54.602Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-24 17:17:29","lastModifiedDate":"2026-09-28 06:16:37","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"97517","Ordinal":"1","Title":"wifi: nl80211: reject beacons with bad HE operation","CVE":"CVE-2026-97517","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"97517","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject beacons with bad HE operation\n\nThe HE operation element not only needs to be longer than\nthe fixed part, but also have an appropriate size for the\nvariable part inside of it. Check this.","Type":"Description","Title":"wifi: nl80211: reject beacons with bad HE operation"}]}}}