🟡 Medium | Source: Microsoft Security Response Center
CVE-2026-64571 is a Linux kernel vulnerability affecting the p54 Wi-Fi driver, specifically a missing validation of received frame length in the p54_rx_eeprom_readback() function. This could allow an attacker to exploit malformed RX frames, potentially leading to memory corruption or information disclosure. While originating in the Linux kernel, its presence in Azure’s Linux-based infrastructure and VMs makes it relevant to cloud environments.
Security Architect’s Take: Ensure all Azure Linux VMs and container hosts are patched with the latest kernel updates addressing this CVE. If you manage Azure Kubernetes Service (AKS) or Linux-based VM scale sets, prioritise node pool updates and review your patch cadence for kernel-level vulnerabilities.
Original advisory: CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback()