CVE-2026-98345
Received Received - Intake

Heap-based Buffer Overflow in Linux Kernel wifi Subsystem

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211_classify8021d() A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211_classify8021d+0x99d/0x12b0 net/wireless/util.c:1027 cfg80211_classify8021d+0x99d/0x12b0 net/wireless/util.c:1027 ieee80211_select_queue+0x37a/0x9e0 net/mac80211/wme.c:180 __ieee80211_subif_start_xmit+0x60f/0x1d90 net/mac80211/tx.c:4304 ieee80211_subif_start_xmit+0xa8/0x6d0 net/mac80211/tx.c:4538 ... packet_sendmsg+0x9173/0xa2a0 net/packet/af_packet.c:3108 Use skb_header_pointer() like the MPLS case.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98345
EUVD
EUVD-2026-93330

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux e31a16d6f64ef0e324c6f54d5112703c3f13a9c4
Linux Linux 2.6.31

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect handling of network frames that appear to be IP packets but are too short. The function cfg80211_classify8021d attempts to classify these frames but reads uninitialized memory due to the short frame size, leading to undefined behavior.

Impact Analysis

This vulnerability could allow attackers to trigger undefined behavior in the Linux kernel by sending maliciously crafted network frames. This might lead to system crashes, data corruption, or potential privilege escalation if exploited.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve this vulnerability. Monitor network traffic for malformed frames and ensure your wireless drivers are up to date.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98345. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart