CVE-2026-98701

wifi: mac80211: release mesh path quota on failed additions

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: release mesh path quota on failed additions

Repeated failed or duplicate mesh path additions can exhaust MESH_MAX_MPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from being created.

mesh_path_add() reserves a slot before allocating and inserting a path. If allocation fails, the function returns without releasing the slot. If the rhashtable insertion reports an error or an existing destination, the function discards its candidate but retains the reservation. No new path is installed in any of these cases.

Release the reservation whenever the candidate is not installed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ae76eef027f75fadd8a8eda55ee07707f077aacb to before 9c715919369a6bae12f03debfcf0716f5d8db1c1Affected ae76eef027f75fadd8a8eda55ee07707f077aacb to before 019c0a91e99f0eb6c331ca63f4fa361e9bfcb089Affected ae76eef027f75fadd8a8eda55ee07707f077aacb to before b5b08afe4d020acb1e6ea1021ce6fb63dedd1f46Affected ae76eef027f75fadd8a8eda55ee07707f077aacb to before 57bfaa8b2853425ab1b83114d823a62fe63f859fAffected ae76eef027f75fadd8a8eda55ee07707f077aacb to before 56691ed9ef792f180e008a43294a4dc059fbeca2Affected ae76eef027f75fadd8a8eda55ee07707f077aacb to before a613c891906b558c10a4fa98ca29747b98e857cbAffected ae76eef027f75fadd8a8eda55ee07707f077aacb to before a59eca4557c7462aad1b160011013290a92de97dAffected ae76eef027f75fadd8a8eda55ee07707f077aacb to before 7325a44474f20c1393a1c114c6811abce6ddfaf4Affected
LinuxLinux	3.10Affected before 3.10Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ae76eef027f75fadd8a8eda55ee07707f077aacb to before 9c715919369a6bae12f03debfcf0716f5d8db1c1Affected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before 019c0a91e99f0eb6c331ca63f4fa361e9bfcb089Affected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before b5b08afe4d020acb1e6ea1021ce6fb63dedd1f46Affected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before 57bfaa8b2853425ab1b83114d823a62fe63f859fAffected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before 56691ed9ef792f180e008a43294a4dc059fbeca2Affected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before a613c891906b558c10a4fa98ca29747b98e857cbAffected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before a59eca4557c7462aad1b160011013290a92de97dAffected
ae76eef027f75fadd8a8eda55ee07707f077aacb to before 7325a44474f20c1393a1c114c6811abce6ddfaf4Affected

LinuxLinux

3.10Affected
before 3.10Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.