All vulnerabilities
CVE-2026-98346

Linux: wifi: cfg80211: don't get the radio mask for netdev-less wdevs

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5b313159c970e945ee125ca87fad0d96ed913e55Also 693d777846d525b8b218bad97a1befa5d9bd4334, 7166da84a7fe3553f9065782fd80299a37b150e5CVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 5b313159c970e945ee125ca87fad0d96ed913e55LinuxCVE List
  • 693d777846d525b8b218bad97a1befa5d9bd4334LinuxCVE List
  • 7166da84a7fe3553f9065782fd80299a37b150e5LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: don't get the radio mask for netdev-less wdevs

cfg80211_calculate_bi_data() calls rdev_get_radio_mask() with wdev->netdev, which can be NULL and then crashes in mac80211.

To avoid that, invert the order of checks since wdev->netdev is always valid for beaconing interfaces.

Text from CVE List

Affected versions 10

  • Linuxaffected: abb4cfe3661aa05426916b21164f88ca5a405a3a before 5b313159c970e945ee125ca87fad0d96ed913e55CVE List
  • Linuxaffected: abb4cfe3661aa05426916b21164f88ca5a405a3a before 693d777846d525b8b218bad97a1befa5d9bd4334CVE List
  • Linuxaffected: abb4cfe3661aa05426916b21164f88ca5a405a3a before 7166da84a7fe3553f9065782fd80299a37b150e5CVE List
  • Linuxaffected: abb4cfe3661aa05426916b21164f88ca5a405a3a before a7783e585360ee05dfe21d3173dbbe985c94f29eCVE List
  • Linuxaffected: 6.11CVE List
  • Linuxunaffected: all versions before 6.11CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4