CVE-2026-98337wifi: mac80211: don't start a ROC while scanning
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't start a ROC while scanning The ROC work can be pending when a scan starts (which requires ROC list to be empty, but that's possible), and then a new ROC can be added to the list and the work will pick it up. Avoid starting that ROC if a scan made it between things, as otherwise we'll hit a warning later: WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: __ieee80211_scan_completed+0x4fd/0xe40 net/mac80211/scan.c:537 ieee80211_scan_work+0x472/0x1ff0 net/mac80211/scan.c:1193 cfg80211_wiphy_work+0x410/0x570 net/wireless/core.c:513
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from aaa016ccd5df89d73483d0d51ee1f692978ccc35 before 5dc8ec2f8d1d62914661577c23ec151f5c9734a4; from aaa016ccd5df89d73483d0d51ee1f692978ccc35 before 81baab8b645ec532bad2b7a8464191c720ef8fd9; from aaa016ccd5df89d73483d0d51ee1f692978ccc35 before 58b806f699052c572dec6cab2c376f884f27e98f; from aaa016ccd5df89d73483d0d51ee1f692978ccc35 before 733f0fde95392ed5f61a4e36aee661ea8d0e8581 | CNA record |
References
- https://git.kernel.org/stable/c/5dc8ec2f8d1d62914661577c23ec151f5c9734a4
- https://git.kernel.org/stable/c/81baab8b645ec532bad2b7a8464191c720ef8fd9
- https://git.kernel.org/stable/c/58b806f699052c572dec6cab2c376f884f27e98f
- https://git.kernel.org/stable/c/733f0fde95392ed5f61a4e36aee661ea8d0e8581
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.