Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98329

wifi: mac80211: don't allow injecting frames wider than the chanctx

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth. If the bandwidth requested is too wide, that triggers a warning in hwsim: WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw)) Drop such frames entirely instead since they cannot be sent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to < a5c715eda066cba5ce3372759188ba8636dca629affected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to < 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27affected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to < c69718519a81e87284494d0c6e6eb7bdd834707aaffected
  • 646e76bb5daf4ca38438c69ffb72cccb605f3466 to < e14bf37bb2b3853012ff160131d1c6233f7a9cc9affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.54 to ≤ 6.18.*unaffected
  • 7.2.8 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References