MM-SA-2026-001 Security Advisory
Heap buffer overflow in morse.ko TIM IE processing
Summary
A heap buffer overflow in the morse.ko HaLow Wi-Fi kernel driver allows an unauthenticated attacker within radio range to cause a denial of service or potentially achieve remote code execution via a crafted 802.11ah beacon containing a malformed Traffic Indication Map Information Element.
Customers using morse.ko in their own Linux integrations should treat their integration as affected if the driver source corresponds to a Morse Micro driver release predating 2.11.13. Contact security@morsemicro.com for patched source.
Action
Upgrade HaLowLink 2 software to 2.11.13 or later.
Acknowledgements
Reported to Morse Micro through Bugcrowd. Morse Micro thanks the researcher for responsible disclosure.