Linux Kernel iwifi Driver MLO Handling Vulnerability

A vulnerability in the Linux kernel's iwifi driver related to Multi-Link Operation (MLO) has been addressed. The issue arose because the function 'iwl_mvm_max_amsdu_size()' incorrectly used the virtual interface's BSS configuration, which could lead to a null pointer dereference. In real MLO scenarios, it's crucial to consider both Logical MAC (LMAC) layers if active, as a station may operate on both simultaneously.

Impact

The vulnerability could cause a null pointer dereference, leading to a crash or undefined behavior in the kernel.