CVE-2026-98423

Status: ReceivedUnscored—

Severity—Unscored

Exploitation probability0.21 %higher than 11% of CVEs

Active exploitationNonot in the CISA catalog

Public exploitNot knownno public code found

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping

The code checks ->started for frames coming from wmediumd, but the radio can be stopped after the check and before frame delivery, causing mac80211 to hit the WARN_ON(!local->started).

Expand the mutex for this case and synchronise against it when the radio is stopped to avoid being able to hit the warning with hwsim.

Drop the error print that would've complicated the error path, it only triggers for allocation failures (already noisy) and malformed frames anyway.

CVSS

NVD hasn't assigned a CVSS score to this CVE (common since the April 2026 policy change).

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.21 %
Percentile among all scored CVEs: 11
Score date: 10/21/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Linux — Linux Kernel^AI

References

Show 6 references

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-98423",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "5ce9b2bc9e73213e316a8c72400256a76bf41814",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "c4e4fe330294e3936e0f4e15d6996468f8a45fb2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "2f59be7585dc81baa6f36b0035dd6848ea43d318",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "5c79ef616aa16af582fb2cb93b0f750975a0004f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7882513bacb176ab4aacceefdd035ca9479da4fb",
              "lessThan": "87840d4a3a21b1c19b867a80e16ba69dff284de2",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim_main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.1",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.112",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.54",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.8",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim_main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-10-14T14:17:53.880",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/2f59be7585dc81baa6f36b0035dd6848ea43d318",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5c79ef616aa16af582fb2cb93b0f750975a0004f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5ce9b2bc9e73213e316a8c72400256a76bf41814",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/87840d4a3a21b1c19b867a80e16ba69dff284de2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c4e4fe330294e3936e0f4e15d6996468f8a45fb2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: don't hand frames to mac80211 while stopping\n\nThe code checks ->started for frames coming from wmediumd, but the\nradio can be stopped after the check and before frame delivery,\ncausing mac80211 to hit the WARN_ON(!local->started).\n\nExpand the mutex for this case and synchronise against it when the\nradio is stopped to avoid being able to hit the warning with hwsim.\n\nDrop the error print that would've complicated the error path, it\nonly triggers for allocation failures (already noisy) and malformed\nframes anyway."
    }
  ],
  "lastModified": "2026-10-19T10:18:47.930",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}