« Volver al listado

CVE-2026-98325

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: set up the TX info early to fix failure paths

The previous commit 2c51457d930f ("wifi: mac80211: free ack status frame on TX header build failure") cleaned up the leak, but still left the code a bit messy and the failed SKB didn't get reported to userspace.

Fix this up by initialising skb->cb[] earlier, which allows using ieee80211_free_txskb() and therefore reports it for the failure in ieee80211_build_hdr(), and unifies the ieee80211_skb_resize() failure path with it.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-98325",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "df711e9fa20d7e996711c7f43a11a71805bef78d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "36e6f0a5e6d7238f4023e77f423c1c1414374309",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "0fb37d2b6cb829cebdaea80f39011469f474bdcc",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "03d67414bd05b86029afc14535238a9393eac1c6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8",
              "lessThan": "50d3d79dc0743b616afb00d01a626c76758721f7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fd39be7ff6f81f2dc91ba6e5f87944abef5b4802",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3.6.3",
              "lessThan": "3.7",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "net/mac80211/tx.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.7",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.112",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.54",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.8",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc4",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "net/mac80211/tx.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-10-06T09:18:24.693",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/03d67414bd05b86029afc14535238a9393eac1c6",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/0fb37d2b6cb829cebdaea80f39011469f474bdcc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/36e6f0a5e6d7238f4023e77f423c1c1414374309",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/50d3d79dc0743b616afb00d01a626c76758721f7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/df711e9fa20d7e996711c7f43a11a71805bef78d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set up the TX info early to fix failure paths\n\nThe previous commit 2c51457d930f (\"wifi: mac80211: free ack status\nframe on TX header build failure\") cleaned up the leak, but still\nleft the code a bit messy and the failed SKB didn't get reported\nto userspace.\n\nFix this up by initialising skb->cb[] earlier, which allows using\nieee80211_free_txskb() and therefore reports it for the failure\nin ieee80211_build_hdr(), and unifies the ieee80211_skb_resize()\nfailure path with it."
    }
  ],
  "lastModified": "2026-10-06T09:18:24.693",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}