All vulnerabilities
CVE-2026-98329

Linux: wifi: mac80211: don't allow injecting frames wider than the chanctx

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in73f48f7e16cadfc74f444ccd10c1d3ae253e2e27Fixed versionCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't allow injecting frames wider than the chanctx

Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth.

If the bandwidth requested is too wide, that triggers a warning in hwsim:

WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw))

Drop such frames entirely instead since they cannot be sent.

Text from CVE List

Affected versions 10

  • Linuxaffected: 646e76bb5daf4ca38438c69ffb72cccb605f3466 before a5c715eda066cba5ce3372759188ba8636dca629CVE List
  • Linuxaffected: 646e76bb5daf4ca38438c69ffb72cccb605f3466 before 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27CVE List
  • Linuxaffected: 646e76bb5daf4ca38438c69ffb72cccb605f3466 before c69718519a81e87284494d0c6e6eb7bdd834707aCVE List
  • Linuxaffected: 646e76bb5daf4ca38438c69ffb72cccb605f3466 before e14bf37bb2b3853012ff160131d1c6233f7a9cc9CVE List
  • Linuxaffected: 4.7CVE List
  • Linuxunaffected: all versions before 4.7CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4