CVE-2026-43052

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.1 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Effective score: 7.1 / 10 HIGH source: CNA overview
MSRC score: 7.0 / 10 HIGH MS rating: Important
CWE(s): —
Reserved: 2026-05-01
Published: 2026-05-01 16:15 UTC
Last updated: 2026-05-12 00:16 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43052.json
Linked Threat: CVE-2026-43052 — CVE-2026-43052

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-01 15:16:51 UTC
NVD last modified: 2026-05-07 18:19:17 UTC
NVD CVSS v3.1: 7.1 / 10 HIGH source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 5.2 / 10
EPSS score: 0.0001 (probability of exploitation in next 30 days)
EPSS percentile: 2.17% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-26651
Assigner: Linux
Published: May 1, 2026, 2:15:46 PM
Updated: May 11, 2026, 10:16:47 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.0100
Vendors: Linux
Products: Linux (patch: 7.0)

Linux (1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <be81f17151fcb8546a95f35ca8f4231b065985de)

Linux (patch: 6.18.22)

Linux (patch: 6.19.12)

Linux (941c93cd039852b7ab02c74f4698c99d82bd6cfe <8148c2fda4ebb17104a573649c9b699208ad10ee)

Linux (1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <7d73872d949c488a1d7c308031d6a9d89b5e0a8b)

Linux (1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <8148c2fda4ebb17104a573649c9b699208ad10ee)

Linux (3.2)

Linux (941c93cd039852b7ab02c74f4698c99d82bd6cfe <be81f17151fcb8546a95f35ca8f4231b065985de)

Linux (patch: 0)

Linux (1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <e77b2937aaa20264e4bd699d3244bdb50e7e3343)

Linux (941c93cd039852b7ab02c74f4698c99d82bd6cfe <e77b2937aaa20264e4bd699d3244bdb50e7e3343)

Linux (patch: 6.12.81)

Linux (941c93cd039852b7ab02c74f4698c99d82bd6cfe <7d73872d949c488a1d7c308031d6a9d89b5e0a8b)

ENISA description: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.

EUVD references (4)

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-08-15 03:01 UTC (source: CVRF).

MS severity: Important
MS CVSS base score: 7.0 / 10 (temporal 7.0)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Release: 2026-May

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`941c93cd039852b7ab02c74f4698c99d82bd6cfe` (affected), `941c93cd039852b7ab02c74f4698c99d82bd6cfe` (affected), `941c93cd039852b7ab02c74f4698c99d82bd6cfe` (affected), `941c93cd039852b7ab02c74f4698c99d82bd6cfe` (affected)	—
Linux	Linux	`3.2` (affected), `0` (unaffected), `6.12.81` (unaffected), `6.18.22` (unaffected), `6.19.12` (unaffected), `7.0` (unaffected)	—

Affected products — CPE 2.3 (5) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

Vendor references (4)

References embedded in the original CVE record by the assigning CNA.

Web references (8)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

MSRC update guide: CVE-2026-43052 msrc
https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee tenable:git.kernel.org
https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de tenable:git.kernel.org
https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 tenable:git.kernel.org
https://nvd.nist.gov/vuln/detail/CVE-2026-43052 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-43052 tenable:www.cve.org
https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b tenable:git.kernel.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (4)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch

Remediations (19)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CISA Warns of Exploited Microsoft Defender 0-Day Flaws

web:cyberpress.org

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026 .

2026-05-23 20:23 UTC
N-central third-party software patch list

web:documentation.n-able.com

For more information on how Patch Manager provides third-party patching, see Patching third-party software. Use the table's InstallerURLs location when configuring vendor and patch exclusions in your firewalls and other web-monitoring software.

2026-05-23 20:23 UTC
Security updates for Adobe Acrobat and Reader

web:helpx.adobe.com

Security updates for Adobe Acrobat and Reader Last updated on Apr 14, 2026 | Also applies to Adobe Acrobat

2026-05-23 20:23 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-23 20:23 UTC
Microsoft releases emergency patches for critical ASP.NET flaw

web:www.bleepingcomputer.com

Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability.

2026-05-23 20:23 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-23 20:23 UTC
KB5087052 - Details, Issues, & Feedback - NinjaOne

web:www.ninjaone.com

KB5087052 is a cumulative security and reliability update released on May 12, 2026 , targeting .NET Framework 3.5 and 4.8.1 on Microsoft Server Operating System version 23H2. This patch represents Microsoft's ongoing commitment to maintaining the security posture and operational stability of the .NET Framework ecosystem across server environments.

2026-05-23 20:23 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

2026-05-23 20:23 UTC
VirusTotal - Home

web:www.virustotal.com

VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

2026-05-23 20:23 UTC
Patch Tuesday May 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-05-23 20:23 UTC
Security Advisory Bulletin 064 | Ubiquiti Community

web:community.ui.com

Published: May 21, 2026 Updated: May 22, 2026 Version: 1.1 Revision: 1.1 Summary 1 of 5 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Affected Products: UniFi OS Server (Version 5.0.6 and earlier) Mitigation : Update your UniFi OS Server to Version 5.0.8 or later ...

2026-05-26 02:45 UTC
Coming from BlueBubbles - OpenClaw

web:docs.openclaw.ai

Migration checklist Use this checklist when you already know your old BlueBubbles config and want the shortest safe path: Verify imsg directly on the Mac that runs Messages.app (imsg chats, imsg history, imsg send, and imsg rpc --help). Copy behavior keys from channels.bluebubbles to channels.imessage: dmPolicy, allowFrom, groupPolicy, groupAllowFrom, groups, includeAttachments ...

2026-05-26 02:45 UTC
Game Update Notes: March 31, 2026 - Guild Wars 2 Forums

web:en-forum.guildwars2.com

03/31/2026—March 31 Release Notes Note to users of third-party programs: The game may not launch or work properly after we release a new build if you use a third-party program, due to possible incompatibilities. ArenaNet cannot offer support if a third-party modification breaks, interferes with, ...

2026-05-26 02:45 UTC
Security Update Guide - Microsoft Security Response Center

web:msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

2026-05-26 02:45 UTC
OnlyFans

web:onlyfans.com

OnlyFans is the social platform revolutionizing creator and fan connections. The site is inclusive of artists and content creators from all genres and allows them to monetize their content while developing authentic relationships with their fanbase.

2026-05-26 02:45 UTC
Google Translate

web:translate.google.com

Google's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.

2026-05-26 02:45 UTC
Ultra Plus Best Performance and Visuals for Everyone

web:www.nexusmods.com

U+ for Star Wars Jedi: Survivor is a graphics enhancement and performance improvement mod that provides advanced control over lighting, reflections, and visual effects.

2026-05-26 02:45 UTC
THE DRACOSPIKE EVO IS HERE + NEW Mutation Extractor & New ... - YouTube

web:www.youtube.com

Catch A Monster Roblox Patch 0.32 is live, and this update adds a lot: Draco Spike Evo, the new Mutation Extractor, Jokaire from the Mobius Circus slot machi...

2026-05-26 02:45 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-43052.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/tdls.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8148c2fda4ebb17104a573649c9b699208ad10ee",
              "status": "affected",
              "version": "941c93cd039852b7ab02c74f4698c99d82bd6cfe",
              "versionType": "git"
            },
            {
              "lessThan": "be81f17151fcb8546a95f35ca8f4231b065985de",
              "status": "affected",
              "version": "941c93cd039852b7ab02c74f4698c99d82bd6cfe",
              "versionType": "git"
            },
            {
              "lessThan": "e77b2937aaa20264e4bd699d3244bdb50e7e3343",
              "status": "affected",
              "version": "941c93cd039852b7ab02c74f4698c99d82bd6cfe",
              "versionType": "git"
            },
            {
              "lessThan": "7d73872d949c488a1d7c308031d6a9d89b5e0a8b",
              "status": "affected",
              "version": "941c93cd039852b7ab02c74f4698c99d82bd6cfe",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/tdls.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.2"
            },
            {
              "lessThan": "3.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.81",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.22",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.81",
                  "versionStartIncluding": "3.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.22",
                  "versionStartIncluding": "3.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.12",
                  "versionStartIncluding": "3.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: check tdls flag in ieee80211_tdls_oper\n\nWhen NL80211_TDLS_ENABLE_LINK is called, the code only checks if the\nstation exists but not whether it is actually a TDLS station. This\nallows the operation to proceed for non-TDLS stations, causing\nunintended side effects like modifying channel context and HT\nprotection before failing.\n\nAdd a check for sta->sta.tdls early in the ENABLE_LINK case, before\nany side effects occur, to ensure the operation is only allowed for\nactual TDLS peers."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:16:47.129Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de"
        },
        {
          "url": "https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343"
        },
        {
          "url": "https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b"
        }
      ],
      "title": "wifi: mac80211: check tdls flag in ieee80211_tdls_oper",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43052",
    "datePublished": "2026-05-01T14:15:46.029Z",
    "dateReserved": "2026-05-01T14:12:55.980Z",
    "dateUpdated": "2026-05-11T22:16:47.129Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}