CVE-2026-98351wifi: virt_wifi: free skb when disconnected
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c7cdba31ed8b87526db978976392802d3f93110c before 38d3a5df85345f158f78b478b265ca906224454e; from c7cdba31ed8b87526db978976392802d3f93110c before ee053ea35c759135460f03d1c574f4ed08de844a; from c7cdba31ed8b87526db978976392802d3f93110c before d177eca79e1106834bc423d3969a4a2e3987996a; from c7cdba31ed8b87526db978976392802d3f93110c before 36727a702cf8e3399e3da60d0856378f6afcfb34; from c7cdba31ed8b87526db978976392802d3f93110c before 56469996c10a0240653fc00576b4d33bdfb4cc51; from c7cdba31ed8b87526db978976392802d3f93110c before 4f266738af45675faa0e8afee08c6e780afa8b06; from c7cdba31ed8b87526db978976392802d3f93110c before 46371442847a725cc0df3697fea2eba1dd54b82b; from c7cdba31ed8b87526db978976392802d3f93110c before f9edf7cf63b96d2b776fca8d258d3c5256e40c8e | CNA record |
References
- https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e
- https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a
- https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a
- https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34
- https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51
- https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06
- https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b
- https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.