A vulnerability classified as very critical was found in Linux Kernel up to 6.18.39/7.1.4. This affects the function
rtw89_assoc_link_rcu_dereference of the component rtw89. Executing a manipulation of the argument mac_id can lead to improper validation of array index.
This vulnerability is handled as CVE-2026-74409. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
