Riskcovery

CVE-2026-98346

wifi: cfg80211: don't get the radio mask for netdev-less wdevs

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: don't get the radio mask for netdev-less wdevs

cfg80211_calculate_bi_data() calls rdev_get_radio_mask() with wdev->netdev, which can be NULL and then crashes in mac80211.

To avoid that, invert the order of checks since wdev->netdev is always valid for beaconing interfaces.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • abb4cfe3661aa05426916b21164f88ca5a405a3a to before 5b313159c970e945ee125ca87fad0d96ed913e55Affected
  • abb4cfe3661aa05426916b21164f88ca5a405a3a to before 693d777846d525b8b218bad97a1befa5d9bd4334Affected
  • abb4cfe3661aa05426916b21164f88ca5a405a3a to before 7166da84a7fe3553f9065782fd80299a37b150e5Affected
  • abb4cfe3661aa05426916b21164f88ca5a405a3a to before a7783e585360ee05dfe21d3173dbbe985c94f29eAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.