SB2026100742 - Improper handling of exceptional conditions in Linux kernel mac80211

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-98334)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of failure conditions in the mac80211 ieee80211_start_ap() function when access point startup fails after setting beaconing state. A local user can trigger a failed access point startup followed by scanning to cause a denial of service.

The divide error was observed with the mac80211_hwsim driver.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3f28551d0241254a75626d868041c6340285088b
• https://git.kernel.org/stable/c/5d5ff5b36f5748a2a077f875a73ccb26860d3fcc
• https://git.kernel.org/stable/c/6eac225f59c1c2277ac74f8a716d6df0ba3b8d28
• https://git.kernel.org/stable/c/d83da43e9b3b3b1bad99ac5a1065f1c63ad5fc32