CVE-2026-98425— wifi: mac80211: don't warn when an IBSS has no channel to scan
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Linux 内核中，以下漏洞已修复： wifi: mac80211: 当 IBSS 没有可扫描的信道时，不要发出警告 在监管域（regulatory domain）导致没有允许的信道可供扫描时会发出警告，但这种情况可能发生在 IBSS 运行过程中监管域发生变化时；在关闭前的 60 秒宽限期内，IBSS 仍可以短暂继续运行。 因此，在这种情况下移除警告。
Affected Version Matrix 14
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 34bcf71502413f8903ade93746f2d0f04b937a78< bb91c15953705445778c170a2523f12351c4d928 |
affected |
34bcf71502413f8903ade93746f2d0f04b937a78< 5f139e17f5bdba6b68177dd8afe13fa4549dfc5f |
affected | ||
34bcf71502413f8903ade93746f2d0f04b937a78< 23d51c0bc18f21d957756ba4650520bb3bc726b2 |
affected | ||
34bcf71502413f8903ade93746f2d0f04b937a78< a7491b7efbd9136b120a12ed72af9c12121dd134 |
affected | ||
5ca99e71a9a6cf33a217690f5d87bc0129d1effd |
affected | ||
1cf18948040a40fa4497e40bcde2ffa8d6b1196e |
affected | ||
3.4.26< 3.5 |
affected | ||
3.7.3< 3.8 |
affected | ||
| … +6 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-98425
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
wifi: mac80211: don't warn when an IBSS has no channel to scan
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: don't warn when an IBSS has no channel to scan
ieee80211_request_ibss_scan() warns when regulatory leaves no
allowed channel, but that can happen as the regdomain can change
while IBSS is operating, and it can continue to operate briefly
during the 60s grace period until it's shut down.
Just remove the warning in this case.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-98425
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-98425
请登录查看更多情报信息。
Other References for CVE-2026-98425 (4)
Same Patch Batch · Linux · 2026-10-14 · 46 CVEs total
| CVE-2026-98398 | locking/lockdep: Invalidate stale class_cache entries for zapped classes | |
| CVE-2026-98396 | powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() | |
| CVE-2026-98393 | net: ipv4: Fix UDP length overflow with PMTU discover and big MTU | |
| CVE-2026-98391 | drm/xe: Guard page-fault worker with runtime PM check | |
| CVE-2026-98389 | drm/amdgpu: skip gfx switch_power_profile during GPU reset | |
| CVE-2026-98388 | exec: do_close_on_exec() before taking exec_update_lock | |
| CVE-2026-98387 | s390/crypto: Fix skcipher_walk return code handling in aes_s390 | |
| CVE-2026-98386 | scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot | |
| CVE-2026-98390 | x86/amd_node: Avoid divide by zero on virtualized systems | |
| CVE-2026-98397 | platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown | |
| CVE-2026-98395 | powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit | |
| CVE-2026-98399 | s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block | |
| CVE-2026-98400 | s390/ipl: Fix NULL deref in kdump without re-IPL parm block | |
| CVE-2026-98402 | net: icmp: avoid invalid transport header access in icmp_send tracepoint | |
| CVE-2026-98401 | net: iptunnel: fix stale transport header during tunnel decapsulation | |
| CVE-2026-98403 | s390/boot: Avoid IPL parameter append past command line | |
| CVE-2026-98404 | drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() | |
| CVE-2026-98405 | smb: client: fix missing iov bounds check in parse_posix_sids() | |
| CVE-2026-98406 | wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver | |
| CVE-2026-98408 | watchdog: rzv2h: Avoid division by zero |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-99999
ipv4: validate checksum_start before completing checksum -
CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period -
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered
Same vendor: Linux
-
CVE-2026-99999
ipv4: validate checksum_start before completing checksum -
CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period -
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered
V. Comments for CVE-2026-98425
No comments yet