CVE-2026-98424
Linux: wifi: cfg80211: undo netns switch if renaming the wiphy fails
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in96bef5667b0c4aecb1b850d2343f69b9d684abb9Also 739b7bf3942da4cde8eedb143d01a16ed865d1d7CVE List
What fixes it
- 96bef5667b0c4aecb1b850d2343f69b9d684abb9LinuxCVE List
- 739b7bf3942da4cde8eedb143d01a16ed865d1d7LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: undo netns switch if renaming the wiphy fails
Once all the interfaces have been moved, cfg80211_switch_netns() moves the wiphy itself by setting its network namespace and then renaming it, which makes sysfs move it. The rename can fail (but only on allocation failures), leaving things mixed up and hitting the warning there.
Ignoring it isn't great, undo the move and let the change fail in this case. If undo fails then WARN, then things would again be stuck in two different network namespaces.
Text from CVE List
Affected versions 8
- Linuxaffected: 463d018323851a608eef52a9427b0585005c647f before 96bef5667b0c4aecb1b850d2343f69b9d684abb9CVE List
- Linuxaffected: 463d018323851a608eef52a9427b0585005c647f before 739b7bf3942da4cde8eedb143d01a16ed865d1d7CVE List
- Linuxaffected: 463d018323851a608eef52a9427b0585005c647f before a41bd1938a9bfe226d444172a7e20e4bd5097960CVE List
- Linuxaffected: 2.6.32CVE List
- Linuxunaffected: all versions before 2.6.32CVE List
- Linuxunaffected: 6.18.54 through 6.18.*CVE List
- Linuxunaffected: 7.2.8 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List