Cloudanix VulnDB

CVE-2026-23373

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Mar 25, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A small coding error in a wireless network driver can cause the computer to log warnings and become less stable when managing certain wireless settings.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Low
Impact
Denial Of Service
Component
OS kernel
Class
Denial of service
Remediation
Patch
Effort
Medium
Patch risk
Low

What it actually does

Incorrect default return of -EOPNOTSUPP from rsi_mac80211_config instead of 0 triggers WARN_ON inside ieee80211_hw_conf_init, resulting in availability impact on wireless configuration paths.

Why it matters to the business

Local users on systems using the rsi wireless driver may experience kernel warnings and potential system instability that disrupts wireless-dependent operations until a corrected kernel is deployed.

How an attack unfolds

A local attacker with low privileges invokes mac80211 hardware configuration on an rsi-based wireless interface; the driver returns an unexpected error code, causing the ieee80211 layer to emit a warning and degrade availability.

How to fix it

Apply the upstream fix that changes rsi_mac80211_config to return 0 by default; rebuild and deploy the corrected kernel once available in distribution packages.

How to confirm the fix worked

Inspect kernel source for rsi_mac80211_config returning 0 on success paths, boot test affected hardware, and confirm absence of ieee80211_hw_conf_init WARN_ON messages in dmesg.

Typical attack path

  1. Obtain local user access on an affected Linux system
  2. Trigger wireless hardware reconfiguration via rsi driver
  3. Induce -EOPNOTSUPP return leading to WARN_ON in ieee80211_hw_conf_init

How to detect it

Search kernel logs (dmesg, syslog) for WARN_ON entries referencing ieee80211_hw_conf_init combined with rsi driver activity; monitor for repeated wireless configuration failures on rsi hardware.

What your security team should do

  • Track Linux kernel updates from distribution vendors for the rsi driver correction
  • Limit local unprivileged access on systems with rsi wireless hardware until patched
  • Review kernel logs for ieee80211-related warnings on affected devices

The record

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config This triggers a WARN_ON in ieee80211_hw_conf_init and isn't the expected behavior from the driver - other drivers default to 0 too.

Affected packages

Ecosystem Package Introduced Fixed