CVE-2026-98326wifi: mac80211: mesh: release the channel if start fails
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and then calls ieee80211_start_mesh(), which can fail. In that case, the chanctx isn't released then interface removal will attempt to unassign it after it's removed from the driver, hitting: wlan0: Failed check-sdata-in-driver check, flags: 0x0 WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx ieee80211_assign_link_chanctx __ieee80211_link_release_channel ieee80211_link_release_channel ieee80211_teardown_sdata unregister_netdevice_many_notify _cfg80211_unregister_wdev ieee80211_remove_interfaces ieee80211_unregister_hw mac80211_hwsim_del_radio hwsim_exit_net Correctly release the channel on start failures.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2b5e19677592c167d012c2d129407f39d2bdeb8d before f0afcec2129c166e61821d6ae097061155f01b12; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before b51f5a310bd6888b90bb9546a8081215dcfe6fbe; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 632f7acfe6dac1278a9314eaaab14fada400ddaf; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 41bee71112db53651ba9a9030de1b843255a4a7f; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before 4a4e3fa77ea36d3419d806fb5883ef425a605a5d; from 2b5e19677592c167d012c2d129407f39d2bdeb8d before ae97fff6495a8764bc0ef281cfe5444f701e527f | CNA record |
References
- https://git.kernel.org/stable/c/f0afcec2129c166e61821d6ae097061155f01b12
- https://git.kernel.org/stable/c/b51f5a310bd6888b90bb9546a8081215dcfe6fbe
- https://git.kernel.org/stable/c/632f7acfe6dac1278a9314eaaab14fada400ddaf
- https://git.kernel.org/stable/c/41bee71112db53651ba9a9030de1b843255a4a7f
- https://git.kernel.org/stable/c/4a4e3fa77ea36d3419d806fb5883ef425a605a5d
- https://git.kernel.org/stable/c/ae97fff6495a8764bc0ef281cfe5444f701e527f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.