SB2026100734 - Improper Check for Unusual or Exceptional Conditions in Linux kernel wireless

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026100734

SB2026100734 - Improper Check for Unusual or Exceptional Conditions in Linux kernel wireless

Published: October 7, 2026

Security Bulletin ID SB2026100734
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-98340)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to trigger kernel warnings and prevent beacon data from being populated or updated for grouped BSS entries.

The vulnerability exists due to improper validation of beacon data presence in cfg80211 BSS grouping when processing probe responses and subsequent hidden-SSID beacons. A remote attacker can transmit probe responses that cause entries without beacon data to be grouped, followed by a hidden-SSID beacon with the same BSSID and channel, to trigger kernel warnings and prevent beacon data from being populated or updated for grouped BSS entries.

A hidden SSID can be zero-length or NUL-filled.


Remediation

Install update from vendor's website.

References