CVE-2026-98424

Received Received - Intake

Wi-Fi Network Namespace Handling Flaw in Linux Kernel

Publication date: 2026-10-14

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg80211_switch_netns() moves the wiphy itself by setting its network namespace and then renaming it, which makes sysfs move it. The rename can fail (but only on allocation failures), leaving things mixed up and hitting the warning there. Ignoring it isn't great, undo the move and let the change fail in this case. If undo fails then WARN, then things would again be stuck in two different network namespaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98424

EUVD

EUVD-2026-101073

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	463d018323851a608eef52a9427b0585005c647f
Linux	Linux	463d018323851a608eef52a9427b0585005c647f
Linux	Linux	463d018323851a608eef52a9427b0585005c647f
Linux	Linux	2.6.32

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel occurs during network namespace switching for WiFi devices. When renaming a wireless device fails after moving interfaces, the system may leave the device in an inconsistent state across network namespaces. The kernel attempts to undo the move but if that fails, it triggers a warning and leaves the device stuck between namespaces.

Detection Guidance

This vulnerability is specific to the Linux kernel's wifi subsystem and may not have direct detection commands. Monitor kernel logs for warnings related to network namespace mismatches or wiphy renaming failures. Check dmesg or journalctl for errors after wifi interface operations.

Impact Analysis

This could cause WiFi devices to malfunction or become inaccessible after network namespace operations. Users might experience connection drops, failed device renames, or system warnings when managing WiFi interfaces in different network namespaces.

Compliance Impact

This vulnerability does not directly impact compliance with standards like GDPR or HIPAA as it relates to a low-level kernel network namespace issue in the Linux wifi subsystem. No evidence suggests it affects data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Apply the latest Linux kernel updates to patch this issue. If immediate patching is not possible, avoid complex wifi operations that may trigger namespace changes. Monitor system logs closely for related errors.

Hi! I’m here to help you understand CVE-2026-98424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70