CVE-2026-98329wifi: mac80211: don't allow injecting frames wider than the chanctx
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth. If the bandwidth requested is too wide, that triggers a warning in hwsim: WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw)) Drop such frames entirely instead since they cannot be sent.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before a5c715eda066cba5ce3372759188ba8636dca629; 646e76bb5daf4ca38438c69ffb72cccb605f3466 builds before 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27; from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before c69718519a81e87284494d0c6e6eb7bdd834707a; from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before e14bf37bb2b3853012ff160131d1c6233f7a9cc9 | CNA record |
References
- https://git.kernel.org/stable/c/a5c715eda066cba5ce3372759188ba8636dca629
- https://git.kernel.org/stable/c/73f48f7e16cadfc74f444ccd10c1d3ae253e2e27
- https://git.kernel.org/stable/c/c69718519a81e87284494d0c6e6eb7bdd834707a
- https://git.kernel.org/stable/c/e14bf37bb2b3853012ff160131d1c6233f7a9cc9
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.