-

CVE-2026-98338

wifi: cfg80211: ibss: ref BSS entry for joined event

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: ibss: ref BSS entry for joined event

When the IBSS is joined, we only record the BSSID/channel in the event
and look up the BSS entry when processing it. However, that's racy,
e.g. a new scan with NL80211_SCAN_FLAG_FLUSH can remove it, causing a
warning in the event work:

  !bss
  WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3d3/0x440
  Workqueue: cfg80211 cfg80211_event_work
   cfg80211_process_wdev_events+0x39f/0x5b0 net/wireless/util.c:1144
   cfg80211_process_rdev_events+0xa1/0x110 net/wireless/util.c:1179
   cfg80211_event_work+0x2f/0x40 net/wireless/core.c:393

Do the lookup early (the driver is expected to only join an IBSS that
has a BSS entry) and keep a reference to it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 667503ddcb96f3b10211f997fe55907fa7509841
Version < b0e3f019e461ac42e45aa3ec1216cefaca2f4a8b
Status affected
Version 667503ddcb96f3b10211f997fe55907fa7509841
Version < 708f9d43d6a2eb9c6b83fe62af628de9dffd9314
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.32
Status affected
Version 0
Version < 2.6.32
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.048
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b0e3f019e461ac42e45aa3ec1216cefaca2f4a8b
https://git.kernel.org/stable/c/708f9d43d6a2eb9c6b83fe62af628de9dffd9314