CVE-2026-98325

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98325", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.340Z", "datePublished": "2026-10-06T08:46:18.734Z", "dateUpdated": "2026-10-19T09:17:35.760Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:17:35.760Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set up the TX info early to fix failure paths\n\nThe previous commit 2c51457d930f (\"wifi: mac80211: free ack status\nframe on TX header build failure\") cleaned up the leak, but still\nleft the code a bit messy and the failed SKB didn't get reported\nto userspace.\n\nFix this up by initialising skb->cb[] earlier, which allows using\nieee80211_free_txskb() and therefore reports it for the failure\nin ieee80211_build_hdr(), and unifies the ieee80211_skb_resize()\nfailure path with it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/tx.c"], "versions": [{"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "df711e9fa20d7e996711c7f43a11a71805bef78d", "status": "affected", "versionType": "git"}, {"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa", "status": "affected", "versionType": "git"}, {"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "36e6f0a5e6d7238f4023e77f423c1c1414374309", "status": "affected", "versionType": "git"}, {"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "0fb37d2b6cb829cebdaea80f39011469f474bdcc", "status": "affected", "versionType": "git"}, {"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "03d67414bd05b86029afc14535238a9393eac1c6", "status": "affected", "versionType": "git"}, {"version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "lessThan": "50d3d79dc0743b616afb00d01a626c76758721f7", "status": "affected", "versionType": "git"}, {"version": "fd39be7ff6f81f2dc91ba6e5f87944abef5b4802", "status": "affected", "versionType": "git"}, {"version": "3.6.3", "lessThan": "3.7", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/tx.c"], "versions": [{"version": "3.7", "status": "affected"}, {"version": "0", "lessThan": "3.7", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.54", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.8", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "6.18.54"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "7.2.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.7", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.6.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/df711e9fa20d7e996711c7f43a11a71805bef78d"}, {"url": "https://git.kernel.org/stable/c/420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa"}, {"url": "https://git.kernel.org/stable/c/36e6f0a5e6d7238f4023e77f423c1c1414374309"}, {"url": "https://git.kernel.org/stable/c/0fb37d2b6cb829cebdaea80f39011469f474bdcc"}, {"url": "https://git.kernel.org/stable/c/03d67414bd05b86029afc14535238a9393eac1c6"}, {"url": "https://git.kernel.org/stable/c/50d3d79dc0743b616afb00d01a626c76758721f7"}], "title": "wifi: mac80211: set up the TX info early to fix failure paths", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/mac80211/tx.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "df711e9fa20d7e996711c7f43a11a71805bef78d", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"lessThan": "420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"lessThan": "36e6f0a5e6d7238f4023e77f423c1c1414374309", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"lessThan": "0fb37d2b6cb829cebdaea80f39011469f474bdcc", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"lessThan": "03d67414bd05b86029afc14535238a9393eac1c6", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"lessThan": "50d3d79dc0743b616afb00d01a626c76758721f7", "status": "affected", "version": "c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8", "versionType": "git"}, {"status": "affected", "version": "fd39be7ff6f81f2dc91ba6e5f87944abef5b4802", "versionType": "git"}, {"lessThan": "3.7", "status": "affected", "version": "3.6.3", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/mac80211/tx.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.7"}, {"lessThan": "3.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.54", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set up the TX info early to fix failure paths\n\nThe previous commit 2c51457d930f (\"wifi: mac80211: free ack status\nframe on TX header build failure\") cleaned up the leak, but still\nleft the code a bit messy and the failed SKB didn't get reported\nto userspace.\n\nFix this up by initialising skb->cb[] earlier, which allows using\nieee80211_free_txskb() and therefore reports it for the failure\nin ieee80211_build_hdr(), and unifies the ieee80211_skb_resize()\nfailure path with it."}], "id": "CVE-2026-98325", "lastModified": "2026-10-19T10:18:34.697", "metrics": {}, "published": "2026-10-06T09:18:24.693", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/03d67414bd05b86029afc14535238a9393eac1c6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0fb37d2b6cb829cebdaea80f39011469f474bdcc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36e6f0a5e6d7238f4023e77f423c1c1414374309"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/50d3d79dc0743b616afb00d01a626c76758721f7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/df711e9fa20d7e996711c7f43a11a71805bef78d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: mac80211: set up the TX info early to fix failure paths", "id": "2546499", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2546499"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-459", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: mac80211: set up the TX info early to fix failure paths\nThe previous commit 2c51457d930f (\"wifi: mac80211: free ack status\nframe on TX header build failure\") cleaned up the leak, but still\nleft the code a bit messy and the failed SKB didn't get reported\nto userspace.\nFix this up by initialising skb->cb[] earlier, which allows using\nieee80211_free_txskb() and therefore reports it for the failure\nin ieee80211_build_hdr(), and unifies the ieee80211_skb_resize()\nfailure path with it.", "A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during network packet transmission to cause improper resource release, potentially leading to a Denial of Service (DoS)."], "name": "CVE-2026-98325", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98325\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98325\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98325.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,df711e9fa20d7e996711c7f43a11a71805bef78d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,36e6f0a5e6d7238f4023e77f423c1c1414374309)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,0fb37d2b6cb829cebdaea80f39011469f474bdcc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,03d67414bd05b86029afc14535238a9393eac1c6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c3e7724b6bc2f25e46c38dbe68f09d71fafeafb8,50d3d79dc0743b616afb00d01a626c76758721f7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "fd39be7ff6f81f2dc91ba6e5f87944abef5b4802"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.6.3,3.7)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,3.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.189,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.54,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.8,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc4,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-06T16:30:03.073392+00:00", "updated": "2026-10-11T05:15:17.410201+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}