Not yet scoredPublished Oct 6, 2026

CVE-2026-98329wifi: mac80211: don't allow injecting frames wider than the chanctx

Updated under an hour ago (Oct 28, 2026, 2:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth. If the bandwidth requested is too wide, that triggers a warning in hwsim: WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw)) Drop such frames entirely instead since they cannot be sent.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before a5c715eda066cba5ce3372759188ba8636dca629; 646e76bb5daf4ca38438c69ffb72cccb605f3466 builds before 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27; from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before c69718519a81e87284494d0c6e6eb7bdd834707a; from 646e76bb5daf4ca38438c69ffb72cccb605f3466 before e14bf37bb2b3853012ff160131d1c6233f7a9cc9	CNA record

References

References

https://git.kernel.org/stable/c/a5c715eda066cba5ce3372759188ba8636dca629
https://git.kernel.org/stable/c/73f48f7e16cadfc74f444ccd10c1d3ae253e2e27
https://git.kernel.org/stable/c/c69718519a81e87284494d0c6e6eb7bdd834707a
https://git.kernel.org/stable/c/e14bf37bb2b3853012ff160131d1c6233f7a9cc9

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.