Driver in question is cfg80211. Majority of popular wireless cards use it. DoS is the only publicly known exploit, right now. There is understanding that RCE i

Driver in question is cfg80211. Majority of popular wireless cards use it. DoS is the only publicly known exploit, right now. There is understanding that RCE is possible with additional specialist work. Local packet injection is an implementation detail of the first public PoC. There are other implementations of the same exploit, that deliver packets over the air instead. Including one that runs on ESP32, and attacks unmodified Linux nearby: https://github.com/jo-m/linux-wifi-ota-crash https://github.com/jo-m/linux-wifi-ota-crash