CVE-2026-98824

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission TX status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata can trigger an out-of-bounds memory access, potentially...

CVE-2026-98823

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service DoS by crashing the system. During a channel switch, the kernel improperly manages memory ownership when merging wireless scan entries that...

CVE-2026-98822

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point AP virtual local area networks VLANs. Due to improper station lookup logic, the kernel matches recipient devices...

CVE-2026-98706

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user or adjacent attacker could trigger a Denial of Service DoS resulting in a system crash. This issue arises from a race condition during the removal of an access point AP or mesh station, where background power-save...

CVE-2026-98705

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When wireless mesh proxy paths are removed or expire, the interface path counter is decremented without having been accounted for during path creation. An attacker can exploit this accounting flaw through rapid proxy path churn,...

CVE-2026-98700

A flaw was found in the Linux kernel's mac80211 wireless subsystem. The transmission function for encapsulated Ethernet frames fails to set the operating frequency band from the channel context on non-Multi-Link Device MLD interfaces. A local user generating network traffic on an affected interfa...

CVE-2026-98702

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A nearby wireless attacker can cause a Denial of Service DoS by sending a crafted Channel Switch Announcement CSA frame with an unsupported bandwidth configuration. Because the kernel fails to reject this channel definition, it...

CVE-2026-98406

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can trigger a denial of service DoS condition by issuing a wireless bitrate configuration request while a network interface is undergoing initialization or teardown. Because the subsystem fails to verify that the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cfg80211: Fixing management registration locking issues The issue with management registration locking was fixed. The list was locked for each wdev, but the cfg80211mgmtregistrationsupdate function iterated over it without holdin...

CVE-2026-98421

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a denial of service DoS by requesting a Tunneled Direct Link Setup TDLS setup confirmation for a nonexistent peer station. Because the subsystem does not verify that the peer station exists before...

kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This vulnerability involves a race condition during the process of disconnecting a wireless device, where a work item can be improperly queued after it has been cancelled. This could allow a local attacker to trigger a system...

CVE-2026-98345

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. A local attacker can cause a Denial of Service DoS by transmitting crafted network frames that appear to be Internet Protocol IP traffic. Because the kernel fails to verify that the frame is large enough to hold a complete header...

CVE-2026-98340

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When processing wireless scan responses, the kernel incorrectly groups network entries for hidden networks before receiving the necessary beacon data. A nearby attacker could exploit this vulnerability by transmitting specially...

CVE-2026-98339

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This flaw allows a nearby attacker operating a rogue wireless access point to cause a Denial of Service DoS. When an access point changes channels, stale Basic Service Set BSS network entries may fail to be removed if unexpected...

CVE-2026-98338

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. A race condition occurs during Independent Basic Service Set IBSS, an ad-hoc wireless network join event handling because the kernel does not hold an active reference to the service set entry before processing the event. A local...

CVE-2026-98337

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user can cause a Denial of Service DoS or system instability by initiating a remain-on-channel ROC operation while a wireless network scan is concurrently active. This race condition leads to improper state handling and...

CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point AP fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on th...

CVE-2026-98325

A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during...

CVE-2026-98326

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When an attempt to start a wireless mesh network fails, the channel context is not properly released. A local user could exploit this flaw during network interface removal, leading to driver state inconsistency and a potential...

CVE-2026-98182

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user with network administration privileges can cause a Denial of Service DoS by configuring an inactive network interface to active monitor mode and then bringing the interface up. Because the required transmit queue is...