CVE-2026-98351

wifi: virt_wifi: free skb when disconnected

State: Published
Severity: Not scored
Published: Oct 6, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: virt_wifi: free skb when disconnected

When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb.

Free the skb before returning the drop status.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c7cdba31ed8b87526db978976392802d3f93110c to before 38d3a5df85345f158f78b478b265ca906224454eAffected c7cdba31ed8b87526db978976392802d3f93110c to before ee053ea35c759135460f03d1c574f4ed08de844aAffected c7cdba31ed8b87526db978976392802d3f93110c to before d177eca79e1106834bc423d3969a4a2e3987996aAffected c7cdba31ed8b87526db978976392802d3f93110c to before 36727a702cf8e3399e3da60d0856378f6afcfb34Affected c7cdba31ed8b87526db978976392802d3f93110c to before 56469996c10a0240653fc00576b4d33bdfb4cc51Affected c7cdba31ed8b87526db978976392802d3f93110c to before 4f266738af45675faa0e8afee08c6e780afa8b06Affected c7cdba31ed8b87526db978976392802d3f93110c to before 46371442847a725cc0df3697fea2eba1dd54b82bAffected c7cdba31ed8b87526db978976392802d3f93110c to before f9edf7cf63b96d2b776fca8d258d3c5256e40c8eAffected
LinuxLinux	5.0Affected before 5.0Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.54 through 6.18.Not affected 7.2.8 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

c7cdba31ed8b87526db978976392802d3f93110c to before 38d3a5df85345f158f78b478b265ca906224454eAffected
c7cdba31ed8b87526db978976392802d3f93110c to before ee053ea35c759135460f03d1c574f4ed08de844aAffected
c7cdba31ed8b87526db978976392802d3f93110c to before d177eca79e1106834bc423d3969a4a2e3987996aAffected
c7cdba31ed8b87526db978976392802d3f93110c to before 36727a702cf8e3399e3da60d0856378f6afcfb34Affected
c7cdba31ed8b87526db978976392802d3f93110c to before 56469996c10a0240653fc00576b4d33bdfb4cc51Affected
c7cdba31ed8b87526db978976392802d3f93110c to before 4f266738af45675faa0e8afee08c6e780afa8b06Affected
c7cdba31ed8b87526db978976392802d3f93110c to before 46371442847a725cc0df3697fea2eba1dd54b82bAffected
c7cdba31ed8b87526db978976392802d3f93110c to before f9edf7cf63b96d2b776fca8d258d3c5256e40c8eAffected

LinuxLinux

5.0Affected
before 5.0Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.54 through 6.18.*Not affected
7.2.8 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.