All vulnerabilities
CVE-2026-98351

Linux: wifi: virt_wifi: free skb when disconnected

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in38d3a5df85345f158f78b478b265ca906224454eAlso 36727a702cf8e3399e3da60d0856378f6afcfb34, 56469996c10a0240653fc00576b4d33bdfb4cc51 and 2 moreCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 38d3a5df85345f158f78b478b265ca906224454eLinuxCVE List
  • 36727a702cf8e3399e3da60d0856378f6afcfb34LinuxCVE List
  • 56469996c10a0240653fc00576b4d33bdfb4cc51LinuxCVE List
  • 4f266738af45675faa0e8afee08c6e780afa8b06LinuxCVE List
  • 46371442847a725cc0df3697fea2eba1dd54b82bLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: virt_wifi: free skb when disconnected

When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb.

Free the skb before returning the drop status.

Text from CVE List

Affected versions 18

  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before 38d3a5df85345f158f78b478b265ca906224454eCVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before ee053ea35c759135460f03d1c574f4ed08de844aCVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before d177eca79e1106834bc423d3969a4a2e3987996aCVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before 36727a702cf8e3399e3da60d0856378f6afcfb34CVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before 56469996c10a0240653fc00576b4d33bdfb4cc51CVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before 4f266738af45675faa0e8afee08c6e780afa8b06CVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before 46371442847a725cc0df3697fea2eba1dd54b82bCVE List
  • Linuxaffected: c7cdba31ed8b87526db978976392802d3f93110c before f9edf7cf63b96d2b776fca8d258d3c5256e40c8eCVE List
  • Linuxaffected: 5.0CVE List
  • Linuxunaffected: all versions before 5.0CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8