CVE-2026-98351

CVE-2026-98351

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: virt_wifi: free skb when disconnected

When the simulated link is disconnected, virt_wifi_start_xmit() returns

NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this

return value as consumed, so every packet sent while disconnected leaks its

skb.

Free the skb before returning the drop status.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-10-06T13:18Z
References (8)
https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:46Z
    wifi: virt_wifi: free skb when disconnected
    cvelistv5