CVE-2026-98327

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: reset the CSA state when leaving ifmsh->csa is allocated in ieee80211_mesh_csa_beacon() and only freed in ieee80211_mesh_finish_csa(), i.e. when the channel switch completes. Leaving the mesh while a switch is still pending therefore leaks it. Additionally, ifmsh->csa_role and ifmsh->chsw_ttl have their state leak in this case, so things can get mixed up in addition to the memory leak. Refactor the reset and call it in ieee80211_stop_mesh() to fix it all.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98327

EUVD

EUVD-2026-93312

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	b8456a14e9d2770846fcf74de18ff95b676149a3
Linux	Linux	b8456a14e9d2770846fcf74de18ff95b676149a3
Linux	Linux	b8456a14e9d2770846fcf74de18ff95b676149a3
Linux	Linux	b8456a14e9d2770846fcf74de18ff95b676149a3
Linux	Linux	3.13

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the mesh networking subsystem. When a mesh network leaves while a channel switch is pending, memory allocated for the switch announcement (ifmsh->csa) is not freed properly. Additionally, state variables (ifmsh->csa_role and ifmsh->chsw_ttl) can leak, causing potential confusion in the system's state.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac80211 mesh networking subsystem and involves memory leaks during channel switch operations. Detection requires checking kernel logs for mesh-related errors or memory leaks during channel switch events. Commands like dmesg | grep -i mesh or journalctl -k | grep -i mesh may help identify issues. If you suspect active exploitation, monitor for unusual mesh network behavior or crashes.

Impact Analysis

This vulnerability primarily affects systems running Linux with mesh networking enabled. It can lead to memory leaks, which may cause system instability or performance degradation over time. The leaked state variables could also cause unexpected behavior in mesh network operations.

Compliance Impact

This vulnerability is a memory leak in the Linux kernel's WiFi mesh networking subsystem. It does not directly impact compliance with standards like GDPR or HIPAA as it does not involve data exposure or unauthorized access. The issue is limited to resource leakage during channel switching in mesh networks.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for this vulnerability. If patching is not immediately possible, disable mesh networking features if they are not required. Monitor kernel security advisories for updates and consider isolating mesh networks until patched.

Hi! I’m here to help you understand CVE-2026-98327. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70