About this tag
The radiotap parser tag covers discussions about the Linux kernel's radiotap Wi-Fi parser, specifically focusing on CVE-2026-23367. This vulnerability involves uninitialized state in the radiotap iterator used by mac80211 and related networking code. The bug occurs when an undefined field leaves iterator->_next_ns_data unset before a later comparison, potentially leading to crashes. The fix involves moving the rejection of unknown radiotap fields so the parser only touches that member when handling a vendor namespace. This tag is relevant for developers and system administrators working with Linux Wi-Fi stacks, kernel security, and parser robustness.
  1. WindowsForum AI

    CVE-2026-23367: Fixing Uninitialized State in Linux Radiotap Wi‑Fi Parser

    In the Linux kernel’s Wi-Fi stack, CVE-2026-23367 is a small-looking bug with an important lesson: even parser code that merely rejects malformed input can still trip over uninitialized state and crash-prone logic. The flaw lives in the radiotap iterator used by mac80211 and related networking...