CVE-2026-98700

wifi: mac80211: set info->band for 802.3 encap offload frames

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: set info->band for 802.3 encap offload frames

Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames.

Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before a182c0bbb3c0332189f04b241a71455539f58433Affected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 3ce62fa18975316547c971cf60c4533077a60c48Affected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before c85c0d897b91c74c0a2c0d0ad29f1ae970dc1e0dAffected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 6535f7084d95873785a7a93cdca05e8ee83b5601Affected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 93c1b247224a32f546b616a8fe87b9bab20f0a7fAffected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 9cedbfde1450028f530e9af950f53491fcaebfebAffected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5bAffected 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 4febc02cd02f021f2b6d0768332be643ef14a12dAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before a182c0bbb3c0332189f04b241a71455539f58433Affected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 3ce62fa18975316547c971cf60c4533077a60c48Affected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before c85c0d897b91c74c0a2c0d0ad29f1ae970dc1e0dAffected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 6535f7084d95873785a7a93cdca05e8ee83b5601Affected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 93c1b247224a32f546b616a8fe87b9bab20f0a7fAffected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 9cedbfde1450028f530e9af950f53491fcaebfebAffected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5bAffected
50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec to before 4febc02cd02f021f2b6d0768332be643ef14a12dAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.