CVE-2026-43267 wifi: rtw89: fix potential zero beacon interval in beacon tracking
A division by zero error in the rtw89 WiFi driver can cause a kernel crash, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43267?
CVE-2026-43267 is a medium-severity denial of service vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: fix potential zero beacon interval in beacon tracking
During fuzz testing, it was discovered that bss_conf->beacon_int might be zero, which could result in a division by zero error in subsequent calculations. Set a default value of 100 TU if the interval is zero to ensure stability.
Weakness: CWE-369
Which versions are affected by CVE-2026-43267?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43267?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-43267 being exploited?
There is no known exploitation of CVE-2026-43267 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43267, DEBIAN-CVE-2026-43267, GHSA-jgp7-74rh-r6jv, ROOT-OS-DEBIAN-11-CVE-2026-43267, ROOT-OS-DEBIAN-12-CVE-2026-43267, ROOT-OS-DEBIAN-13-CVE-2026-43267 and 3 more.