CVE-2026-98423
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:
wifi: mac80211_hwsim: no entregar tramas a mac80211 durante la detención
El código comprueba ->started en las tramas que llegan desde wmediumd, pero la radio puede detenerse después de la comprobación y antes de la entrega de la trama, lo que provoca que mac80211 active el WARN_ON(!local->started).
Amplía el mutex para este caso y sincroniza con él cuando la radio se detiene, para evitar que se pueda activar la advertencia con hwsim.
Elimina el mensaje de error que habría complicado la ruta de error; solo se activa en caso de fallos de asignación (que ya generan bastante ruido) y de tramas mal formadas, de todos modos.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.21 %
- Percentil entre todas las CVEs puntuadas
- 11
- Fecha de la puntuación
- 21/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 6 referencias
- https://git.kernel.org/stable/c/2f59be7585dc81baa6f36b0035dd6848ea43d318
- https://git.kernel.org/stable/c/5c79ef616aa16af582fb2cb93b0f750975a0004f
- https://git.kernel.org/stable/c/5ce9b2bc9e73213e316a8c72400256a76bf41814
- https://git.kernel.org/stable/c/87840d4a3a21b1c19b867a80e16ba69dff284de2
- https://git.kernel.org/stable/c/c4e4fe330294e3936e0f4e15d6996468f8a45fb2
- https://git.kernel.org/stable/c/d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98423",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "5ce9b2bc9e73213e316a8c72400256a76bf41814",
"versionType": "git"
},
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "c4e4fe330294e3936e0f4e15d6996468f8a45fb2",
"versionType": "git"
},
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "2f59be7585dc81baa6f36b0035dd6848ea43d318",
"versionType": "git"
},
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "5c79ef616aa16af582fb2cb93b0f750975a0004f",
"versionType": "git"
},
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb",
"versionType": "git"
},
{
"status": "affected",
"version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
"lessThan": "87840d4a3a21b1c19b867a80e16ba69dff284de2",
"versionType": "git"
}
],
"programFiles": [
"drivers/net/wireless/virtual/mac80211_hwsim_main.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "3.1"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "3.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.54",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.8",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/wireless/virtual/mac80211_hwsim_main.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-14T14:17:53.880",
"references": [
{
"url": "https://git.kernel.org/stable/c/2f59be7585dc81baa6f36b0035dd6848ea43d318",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5c79ef616aa16af582fb2cb93b0f750975a0004f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5ce9b2bc9e73213e316a8c72400256a76bf41814",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/87840d4a3a21b1c19b867a80e16ba69dff284de2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c4e4fe330294e3936e0f4e15d6996468f8a45fb2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: don't hand frames to mac80211 while stopping\n\nThe code checks ->started for frames coming from wmediumd, but the\nradio can be stopped after the check and before frame delivery,\ncausing mac80211 to hit the WARN_ON(!local->started).\n\nExpand the mutex for this case and synchronise against it when the\nradio is stopped to avoid being able to hit the warning with hwsim.\n\nDrop the error print that would've complicated the error path, it\nonly triggers for allocation failures (already noisy) and malformed\nframes anyway."
}
],
"lastModified": "2026-10-19T10:18:47.930",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}