CVE-2026-98330
Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211_pernet_exit() moves any wiphy back to the initial namespace, and just warns if that fails. But moving an interface can fail (due to allocation failures), and then the wiphy is left behind with a garbage netns pointer: Kernel mode fault at addr 0x30 genlmsg_multicast_netns.constprop.0+0x46/0xcf [cfg80211] nl80211_notify_wiphy+0xcd/0xe8 [cfg80211] wiphy_unregister+0x169/0x3fc [cfg80211] Note that commit debac3a20dec ("net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().") fixed another path that could reach it without allocation failures. Remove interfaces that cannot be moved instead of failing the switch, so that the wiphy always ends up in the initial namespace. In this case the netdev core will unregister the interfaces anyway.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-98330
EUVD
EUVD-2026-93315

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 463d018323851a608eef52a9427b0585005c647f
Linux Linux 463d018323851a608eef52a9427b0585005c647f
Linux Linux 463d018323851a608eef52a9427b0585005c647f
Linux Linux 2.6.32

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel occurs when a network namespace is destroyed. The cfg80211_pernet_exit() function attempts to move a wiphy (wireless device) back to the initial namespace but fails to handle allocation errors properly. This leaves the wiphy with an invalid network namespace pointer, which can lead to kernel faults when accessing it later.

Detection Guidance

This vulnerability is specific to the Linux kernel's cfg80211 subsystem and network namespace handling. Detection requires checking kernel logs for crashes or faults related to wifi operations or network namespace destruction. Monitor logs with commands like dmesg | grep -i 'cfg80211\|wiphy\|netns\|kernel panic' or journalctl -k | grep -i 'cfg80211\|wiphy\|netns\|kernel panic'.

Impact Analysis

This vulnerability could cause kernel crashes or instability when network namespaces are destroyed, potentially leading to system freezes or reboots. It may affect systems using Wi-Fi devices in containerized or virtualized environments where network namespaces are frequently managed.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to network namespace handling in the wifi subsystem, which could lead to kernel faults but does not involve data exposure or privacy violations.

Mitigation Strategies

Apply the latest Linux kernel updates to patch this vulnerability. If immediate patching is not possible, avoid destroying network namespaces while wifi interfaces are active. Monitor system stability and kernel logs for signs of crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98330. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart