All vulnerabilities
CVE-2026-98700

Linux: wifi: mac80211: set info->band for 802.3 encap offload frames

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6535f7084d95873785a7a93cdca05e8ee83b5601Also 93c1b247224a32f546b616a8fe87b9bab20f0a7f, 9cedbfde1450028f530e9af950f53491fcaebfeb and 2 moreCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 6535f7084d95873785a7a93cdca05e8ee83b5601LinuxCVE List
  • 93c1b247224a32f546b616a8fe87b9bab20f0a7fLinuxCVE List
  • 9cedbfde1450028f530e9af950f53491fcaebfebLinuxCVE List
  • 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5bLinuxCVE List
  • 4febc02cd02f021f2b6d0768332be643ef14a12dLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: set info->band for 802.3 encap offload frames

Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames.

Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.

Text from CVE List

Affected versions 12

  • Linuxaffected: 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec before 6535f7084d95873785a7a93cdca05e8ee83b5601CVE List
  • Linuxaffected: 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec before 93c1b247224a32f546b616a8fe87b9bab20f0a7fCVE List
  • Linuxaffected: 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec before 9cedbfde1450028f530e9af950f53491fcaebfebCVE List
  • Linuxaffected: 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec before 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5bCVE List
  • Linuxaffected: 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec before 4febc02cd02f021f2b6d0768332be643ef14a12dCVE List
  • Linuxaffected: 5.7CVE List
  • Linuxunaffected: all versions before 5.7CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5