SB20261015103 - Improper handling of exceptional conditions in Linux kernel wireless

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-98424)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to leave wireless device state inconsistent across network namespaces.

The vulnerability exists due to improper handling of a device rename failure in cfg80211_switch_netns() when moving a wireless device to another network namespace. A local user can initiate a network namespace change that encounters an allocation failure during the rename to leave wireless device state inconsistent across network namespaces.

The wireless device must support network namespace changes through the WIPHY_FLAG_NETNS_OK flag.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/739b7bf3942da4cde8eedb143d01a16ed865d1d7
• https://git.kernel.org/stable/c/96bef5667b0c4aecb1b850d2343f69b9d684abb9
• https://git.kernel.org/stable/c/a41bd1938a9bfe226d444172a7e20e4bd5097960