CVE-2026-98423

CVE-2026-98423

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping

The code checks ->started for frames coming from wmediumd, but the

radio can be stopped after the check and before frame delivery,

causing mac80211 to hit the WARN_ON(!local->started).

Expand the mutex for this case and synchronise against it when the

radio is stopped to avoid being able to hit the warning with hwsim.

Drop the error print that would've complicated the error path, it

only triggers for allocation failures (already noisy) and malformed

frames anyway.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2026-10-14T18:17Z
References (6)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:27Z
    wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
    cvelistv5
  • 14 OCT 13:27Z
    wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
    cvelistv5