Riskcovery

CVE-2026-98327

wifi: mac80211: mesh: reset the CSA state when leaving

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: mesh: reset the CSA state when leaving

ifmsh->csa is allocated in ieee80211_mesh_csa_beacon() and only freed in ieee80211_mesh_finish_csa(), i.e. when the channel switch completes. Leaving the mesh while a switch is still pending therefore leaks it.

Additionally, ifmsh->csa_role and ifmsh->chsw_ttl have their state leak in this case, so things can get mixed up in addition to the memory leak.

Refactor the reset and call it in ieee80211_stop_mesh() to fix it all.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b8456a14e9d2770846fcf74de18ff95b676149a3 to before aba8dfb45864441199748c33ce3c1c8ca121c8bdAffected
  • b8456a14e9d2770846fcf74de18ff95b676149a3 to before bd3b21145ae2e781daac1bbd19216a63ab4e0cbdAffected
  • b8456a14e9d2770846fcf74de18ff95b676149a3 to before ba5bf83a81e8832cb84bb3a2da67512f81f57a02Affected
  • b8456a14e9d2770846fcf74de18ff95b676149a3 to before 860134b3af77970e006feab7e5decb8c84771c7fAffected
LinuxLinux
  • 3.13Affected
  • before 3.13Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.