CVE-2026-98891

wifi: mac80211: validate deauth frame length before reason access

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: validate deauth frame length before reason access

ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame.

Validate the deauth frame length first and only then read the reason code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 51092dc769f021e9634474e1bd5a561da477fbdbAffected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before a6ed4c00ccdc15011a73daa2b38af9fc5a2c543eAffected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 80d1a110e9096b5bf41497f6b151154084862385Affected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before a78689e2beed200d4590318612c74ae25c9408cfAffected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 7a5ef1fd654d0e90d59aa32c881789c8bcc4125aAffected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 9df64ad43e1f2c036667bba2bf385e9d7b3af564Affected c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60fAffected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 51092dc769f021e9634474e1bd5a561da477fbdbAffected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before a6ed4c00ccdc15011a73daa2b38af9fc5a2c543eAffected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 80d1a110e9096b5bf41497f6b151154084862385Affected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before a78689e2beed200d4590318612c74ae25c9408cfAffected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 7a5ef1fd654d0e90d59aa32c881789c8bcc4125aAffected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 9df64ad43e1f2c036667bba2bf385e9d7b3af564Affected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to before 4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60fAffected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.