In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6E support. Do not send it if the device doesn't support 6E. Apparently, the firmware is mistakenly advertising support for this command even on AX201 which does not support 6E and then the firmware crashes.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related     to 6E support. Do not send it if the device doesn't support 6E. Apparently, the firmware is mistakenly     advertising support for this command even on AX201 which does not support 6E and then the firmware     crashes. (CVE-2026-43325)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
323086	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:2482-1)	Nessus	SuSE Local Security Checks	high
320429	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20912-1)	Nessus	SuSE Local Security Checks	medium
313327	Linux Distros Unpatched Vulnerability : CVE-2026-43325	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-43325

medium

Tenable Plugins

high

medium

medium