CVE-2026-23373 wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
A bug in the Linux kernel's RSI WiFi driver causes a kernel warning, potentially leading to system instability or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23373?
CVE-2026-23373 is a medium-severity denial of service vulnerability in Linux kernel, published on 25 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
This triggers a WARN_ON in ieee80211_hw_conf_init and isn't the expected behavior from the driver - other drivers default to 0 too.
Which versions are affected by CVE-2026-23373?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-23373?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-23373 being exploited?
There is no known exploitation of CVE-2026-23373 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-23373, DEBIAN-CVE-2026-23373, GHSA-2x2q-jqp8-mvjv, ROOT-OS-DEBIAN-13-CVE-2026-23373, UBUNTU-CVE-2026-23373.