CVE-2026-98700

Received Received - Intake

Wi-Fi Frame Band Misconfiguration in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info->band for 802.3 encap offload frames Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames. Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98700

EUVD

EUVD-2026-103954

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec
Linux	Linux	50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec
Linux	Linux	50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec
Linux	Linux	50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec
Linux	Linux	5.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the mac80211 subsystem not properly setting the band information for 802.3 encapsulated offload frames. The ieee80211_8023_xmit() function fails to set info->band from the channel context on non-MLD interfaces, leaving it at 0. This causes ieee80211_get_tx_rates() to use incorrect band information for these frames.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac80211 subsystem and relates to incorrect band setting in 802.3 encap offload frames. Detection requires checking kernel logs for related errors or examining the mac80211 module behavior. Commands like dmesg | grep mac80211 or journalctl -k | grep mac80211 may help identify issues.

Impact Analysis

This vulnerability may lead to incorrect transmission of Wi-Fi frames, potentially causing network instability, performance issues, or unexpected behavior in wireless communication. Systems using affected Linux kernel versions could experience unreliable Wi-Fi connectivity or data transmission errors.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a low-level Linux kernel issue in WiFi frame handling. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to resolve this issue. If immediate patching is not possible, disable 802.3 encap offload features or monitor network traffic for anomalies related to mac80211 operations.

Hi! I’m here to help you understand CVE-2026-98700. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70