CVE-2026-98707

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition during the teardown of a Receive Block Acknowledgement RX BA session can allow an internal timer to be rearmed after it has been deleted, leaving it queued on freed memory. An attacker within Wi-Fi range could...