Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-98891 |
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: validate deauth frame length before reason access
ieee80211_rx_mgmt_deauth() reads the...
LinuxLinux, Linux kernel, Linux mac80211
|
NVD | |||
|
CVE-2026-98891In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: validate deauth frame length before reason access
ieee80211_rx_mgmt_deauth() reads the...
Executive summaryThe advisory describes a flaw in the Linux kernel's wireless networking code (mac80211) that can be reached by processing a received deauthentication frame. The advisory does not state how severe the flaw is, and the text shown describes a patch that validates the frame length before reading the reason code. Technical summaryThe flaw is in ieee80211_rx_mgmt_deauth(), which read the deauthentication reason code before checking that the fixed field was present in the received frame, a missing bounds check that is consistent with an out-of-bounds read. The fix moves the reason code read after a length check using offsetofend on the deauth reason_code field, and the patch is shown as a commit in the Linux kernel stable tree. The attack vector and preconditions are not stated, and the advisory does not describe an impact such as a crash or information leak. Affected and fixed kernel version numbers are not stated, workarounds are not stated, and no detection guidance is given. CVSS score and exploitation status are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/4a360c6e18dfa9d…c7247a6a8cc8dfe0d60f ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||