CVE-2026-98425wifi: mac80211: don't warn when an IBSS has no channel to scan
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211_request_ibss_scan() warns when regulatory leaves no allowed channel, but that can happen as the regdomain can change while IBSS is operating, and it can continue to operate briefly during the 60s grace period until it's shut down. Just remove the warning in this case.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 14, 2026
- First seen by InfoSec Signals
- Oct 14, 2026
Affected products
Linux Linux linux:linux (from the name) | from 34bcf71502413f8903ade93746f2d0f04b937a78 before bb91c15953705445778c170a2523f12351c4d928; 34bcf71502413f8903ade93746f2d0f04b937a78 builds before 5f139e17f5bdba6b68177dd8afe13fa4549dfc5f; 34bcf71502413f8903ade93746f2d0f04b937a78 builds before 23d51c0bc18f21d957756ba4650520bb3bc726b2; from 34bcf71502413f8903ade93746f2d0f04b937a78 before a7491b7efbd9136b120a12ed72af9c12121dd134; 5ca99e71a9a6cf33a217690f5d87bc0129d1effd; 1cf18948040a40fa4497e40bcde2ffa8d6b1196e; from 3.4.26 before 3.5; from 3.7.3 before 3.8 | CNA record |
References
- https://git.kernel.org/stable/c/bb91c15953705445778c170a2523f12351c4d928
- https://git.kernel.org/stable/c/5f139e17f5bdba6b68177dd8afe13fa4549dfc5f
- https://git.kernel.org/stable/c/23d51c0bc18f21d957756ba4650520bb3bc726b2
- https://git.kernel.org/stable/c/a7491b7efbd9136b120a12ed72af9c12121dd134
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.