-

CVE-2026-98327

wifi: mac80211: mesh: reset the CSA state when leaving

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: mesh: reset the CSA state when leaving

ifmsh->csa is allocated in ieee80211_mesh_csa_beacon() and only freed
in ieee80211_mesh_finish_csa(), i.e. when the channel switch completes.
Leaving the mesh while a switch is still pending therefore leaks it.

Additionally, ifmsh->csa_role and ifmsh->chsw_ttl have their state leak
in this case, so things can get mixed up in addition to the memory
leak.

Refactor the reset and call it in ieee80211_stop_mesh() to fix it all.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b8456a14e9d2770846fcf74de18ff95b676149a3
Version < aba8dfb45864441199748c33ce3c1c8ca121c8bd
Status affected
Version b8456a14e9d2770846fcf74de18ff95b676149a3
Version < bd3b21145ae2e781daac1bbd19216a63ab4e0cbd
Status affected
Version b8456a14e9d2770846fcf74de18ff95b676149a3
Version < ba5bf83a81e8832cb84bb3a2da67512f81f57a02
Status affected
Version b8456a14e9d2770846fcf74de18ff95b676149a3
Version < 860134b3af77970e006feab7e5decb8c84771c7f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.13
Status affected
Version 0
Version < 3.13
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/aba8dfb45864441199748c33ce3c1c8ca121c8bd
https://git.kernel.org/stable/c/bd3b21145ae2e781daac1bbd19216a63ab4e0cbd
https://git.kernel.org/stable/c/ba5bf83a81e8832cb84bb3a2da67512f81f57a02
https://git.kernel.org/stable/c/860134b3af77970e006feab7e5decb8c84771c7f