Not yet scoredPublished Oct 6, 2026

CVE-2026-98351wifi: virt_wifi: free skb when disconnected

Updated under an hour ago (Oct 27, 2026, 4:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c7cdba31ed8b87526db978976392802d3f93110c before 38d3a5df85345f158f78b478b265ca906224454e; from c7cdba31ed8b87526db978976392802d3f93110c before ee053ea35c759135460f03d1c574f4ed08de844a; from c7cdba31ed8b87526db978976392802d3f93110c before d177eca79e1106834bc423d3969a4a2e3987996a; from c7cdba31ed8b87526db978976392802d3f93110c before 36727a702cf8e3399e3da60d0856378f6afcfb34; from c7cdba31ed8b87526db978976392802d3f93110c before 56469996c10a0240653fc00576b4d33bdfb4cc51; from c7cdba31ed8b87526db978976392802d3f93110c before 4f266738af45675faa0e8afee08c6e780afa8b06; from c7cdba31ed8b87526db978976392802d3f93110c before 46371442847a725cc0df3697fea2eba1dd54b82b; from c7cdba31ed8b87526db978976392802d3f93110c before f9edf7cf63b96d2b776fca8d258d3c5256e40c8e	CNA record

References

References

https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e
https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a
https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a
https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34
https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51
https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06
https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b
https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.