CVE-2026-98336

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98336", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.342Z", "datePublished": "2026-10-06T08:46:27.634Z", "dateUpdated": "2026-10-19T09:17:47.387Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:17:47.387Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't offload TC setup on AP_VLAN interfaces\n\nAP_VLAN interfaces are purely virtual, so don't try to offload\nTC setup to drivers. We can't really use the AP interface either\nsince we may not know it all the time, and it could technically\neven change.\n\nJust reject the TC offload so things get done in software."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/iface.c"], "versions": [{"version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "lessThan": "790221efbfece13a2347563b3785aaca48f192e2", "status": "affected", "versionType": "git"}, {"version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "lessThan": "40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718", "status": "affected", "versionType": "git"}, {"version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "lessThan": "9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11", "status": "affected", "versionType": "git"}, {"version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "lessThan": "ea3ef2165e4751df2ee3bc1c07a192243a08faa5", "status": "affected", "versionType": "git"}, {"version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "lessThan": "362bd5bce29ed0f6fd3d39a7065567777d70606e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/iface.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.54", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.8", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.18.54"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.2.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/790221efbfece13a2347563b3785aaca48f192e2"}, {"url": "https://git.kernel.org/stable/c/40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718"}, {"url": "https://git.kernel.org/stable/c/9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11"}, {"url": "https://git.kernel.org/stable/c/ea3ef2165e4751df2ee3bc1c07a192243a08faa5"}, {"url": "https://git.kernel.org/stable/c/362bd5bce29ed0f6fd3d39a7065567777d70606e"}], "title": "wifi: mac80211: don't offload TC setup on AP_VLAN interfaces", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/mac80211/iface.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "790221efbfece13a2347563b3785aaca48f192e2", "status": "affected", "version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "versionType": "git"}, {"lessThan": "40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718", "status": "affected", "version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "versionType": "git"}, {"lessThan": "9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11", "status": "affected", "version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "versionType": "git"}, {"lessThan": "ea3ef2165e4751df2ee3bc1c07a192243a08faa5", "status": "affected", "version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "versionType": "git"}, {"lessThan": "362bd5bce29ed0f6fd3d39a7065567777d70606e", "status": "affected", "version": "61587f1556fec39e8bafc40c8715f560639a4cf2", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/mac80211/iface.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.54", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't offload TC setup on AP_VLAN interfaces\n\nAP_VLAN interfaces are purely virtual, so don't try to offload\nTC setup to drivers. We can't really use the AP interface either\nsince we may not know it all the time, and it could technically\neven change.\n\nJust reject the TC offload so things get done in software."}], "id": "CVE-2026-98336", "lastModified": "2026-10-19T10:18:35.850", "metrics": {}, "published": "2026-10-06T09:18:26.170", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/362bd5bce29ed0f6fd3d39a7065567777d70606e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/790221efbfece13a2347563b3785aaca48f192e2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ea3ef2165e4751df2ee3bc1c07a192243a08faa5"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces", "id": "2546458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2546458"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1287", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: mac80211: don't offload TC setup on AP_VLAN interfaces\nAP_VLAN interfaces are purely virtual, so don't try to offload\nTC setup to drivers. We can't really use the AP interface either\nsince we may not know it all the time, and it could technically\neven change.\nJust reject the TC offload so things get done in software.", "A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. A local user with network administration privileges can cause a denial of service (DoS) by configuring hardware traffic control (TC) offloading on virtual Access Point Virtual Local Area Network (AP_VLAN) interfaces. Because these interfaces are purely virtual and lack hardware driver support, attempting to offload traffic control operations causes system instability and crashes the kernel."], "name": "CVE-2026-98336", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98336\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98336\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98336.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61587f1556fec39e8bafc40c8715f560639a4cf2,790221efbfece13a2347563b3785aaca48f192e2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61587f1556fec39e8bafc40c8715f560639a4cf2,40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61587f1556fec39e8bafc40c8715f560639a4cf2,9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61587f1556fec39e8bafc40c8715f560639a4cf2,ea3ef2165e4751df2ee3bc1c07a192243a08faa5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[61587f1556fec39e8bafc40c8715f560639a4cf2,362bd5bce29ed0f6fd3d39a7065567777d70606e)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.54,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.8,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,7.3-rc4]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-06T13:45:18.455167+00:00", "updated": "2026-10-11T06:30:13.903727+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}