Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-98423— wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，以下漏洞已得到修复： wifi: mac80211_hwsim：在停止状态下，不要将帧传递给 mac80211 该代码检查来自 wmediumd 的帧是否满足 条件，但可能在检查之后、帧传递之前无线电被停止，导致 mac80211 触发 警告。 为此情况扩展互斥锁，并在无线电停止时与之同步，以避免在使用 hwsim 时触发该警告。 移除会导致错误路径复杂化的错误打印信息，因为它仅在分配失败（本身已有噪声）或帧格式错误时才会触发。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P11

Possible ATT&CK Techniques 1 AI

T1069 · Permission Groups Discovery

Affected Version Matrix 14

VendorProduct Version RangeStatus
Linux Linux 7882513bacb176ab4aacceefdd035ca9479da4fb< 5ce9b2bc9e73213e316a8c72400256a76bf41814 affected
7882513bacb176ab4aacceefdd035ca9479da4fb< c4e4fe330294e3936e0f4e15d6996468f8a45fb2 affected
7882513bacb176ab4aacceefdd035ca9479da4fb< 2f59be7585dc81baa6f36b0035dd6848ea43d318 affected
7882513bacb176ab4aacceefdd035ca9479da4fb< 5c79ef616aa16af582fb2cb93b0f750975a0004f affected
7882513bacb176ab4aacceefdd035ca9479da4fb< d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb affected
7882513bacb176ab4aacceefdd035ca9479da4fb< 87840d4a3a21b1c19b867a80e16ba69dff284de2 affected
3.1 affected
< 3.1 unaffected
… +6 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-98423

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping The code checks ->started for frames coming from wmediumd, but the radio can be stopped after the check and before frame delivery, causing mac80211 to hit the WARN_ON(!local->started). Expand the mutex for this case and synchronise against it when the radio is stopped to avoid being able to hit the warning with hwsim. Drop the error print that would've complicated the error path, it only triggers for allocation failures (already noisy) and malformed frames anyway.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 7882513bacb176ab4aacceefdd035ca9479da4fb ~ 5ce9b2bc9e73213e316a8c72400256a76bf41814 -
Linux Linux 3.1 -

II. Public POCs for CVE-2026-98423

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-98423

请登录查看更多情报信息。

Other References for CVE-2026-98423 (6)

Same Patch Batch · Linux · 2026-10-14 · 46 CVEs total

CVE-2026-98398 locking/lockdep: Invalidate stale class_cache entries for zapped classes
CVE-2026-98396 powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()
CVE-2026-98393 net: ipv4: Fix UDP length overflow with PMTU discover and big MTU
CVE-2026-98391 drm/xe: Guard page-fault worker with runtime PM check
CVE-2026-98389 drm/amdgpu: skip gfx switch_power_profile during GPU reset
CVE-2026-98388 exec: do_close_on_exec() before taking exec_update_lock
CVE-2026-98387 s390/crypto: Fix skcipher_walk return code handling in aes_s390
CVE-2026-98386 scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
CVE-2026-98390 x86/amd_node: Avoid divide by zero on virtualized systems
CVE-2026-98397 platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown
CVE-2026-98395 powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit
CVE-2026-98399 s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block
CVE-2026-98400 s390/ipl: Fix NULL deref in kdump without re-IPL parm block
CVE-2026-98402 net: icmp: avoid invalid transport header access in icmp_send tracepoint
CVE-2026-98401 net: iptunnel: fix stale transport header during tunnel decapsulation
CVE-2026-98403 s390/boot: Avoid IPL parameter append past command line
CVE-2026-98404 drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
CVE-2026-98405 smb: client: fix missing iov bounds check in parse_posix_sids()
CVE-2026-98406 wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver
CVE-2026-98408 watchdog: rzv2h: Avoid division by zero

Showing top 20 of 46 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-98423

No comments yet

Leave a comment