CVE-2026-98337

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't start a ROC while scanning The ROC work can be pending when a scan starts (which requires ROC list to be empty, but that's possible), and then a new ROC can be added to the list and the work will pick it up. Avoid starting that ROC if a scan made it between things, as otherwise we'll hit a warning later: WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: __ieee80211_scan_completed+0x4fd/0xe40 net/mac80211/scan.c:537 ieee80211_scan_work+0x472/0x1ff0 net/mac80211/scan.c:1193 cfg80211_wiphy_work+0x410/0x570 net/wireless/core.c:513

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98337

EUVD

EUVD-2026-93322

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	aaa016ccd5df89d73483d0d51ee1f692978ccc35
Linux	Linux	aaa016ccd5df89d73483d0d51ee1f692978ccc35
Linux	Linux	aaa016ccd5df89d73483d0d51ee1f692978ccc35
Linux	Linux	aaa016ccd5df89d73483d0d51ee1f692978ccc35
Linux	Linux	4.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition where a Remain-on-Channel (ROC) operation can be started while a Wi-Fi scan is in progress. This happens because the ROC work can be pending when a scan starts, and a new ROC may be added to the list before the scan completes. This leads to a warning in the kernel logs when the ROC is processed later.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac80211 subsystem and may not have direct detection commands. Monitor kernel logs for the warning message: 'WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0' using 'dmesg' or 'journalctl -k'.

Impact Analysis

This vulnerability may cause kernel warnings and potential instability in Wi-Fi operations. It could disrupt wireless network functionality, leading to connectivity issues or unexpected behavior during scans or ROC operations.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level Linux kernel issue related to WiFi scanning and ROC (Remain On Channel) operations, which does not involve data handling, privacy, or security controls typically regulated by these standards.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Check your distribution's security advisories or kernel update channels for the patched version.

Hi! I’m here to help you understand CVE-2026-98337. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70