Riskcovery

CVE-2026-98329

wifi: mac80211: don't allow injecting frames wider than the chanctx

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't allow injecting frames wider than the chanctx

Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth.

If the bandwidth requested is too wide, that triggers a warning in hwsim:

WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw))

Drop such frames entirely instead since they cannot be sent.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to before a5c715eda066cba5ce3372759188ba8636dca629Affected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to before 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27Affected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to before c69718519a81e87284494d0c6e6eb7bdd834707aAffected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to before e14bf37bb2b3853012ff160131d1c6233f7a9cc9Affected
LinuxLinux
  • 4.7Affected
  • before 4.7Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.