SB20261015151 - Improper initialization in Linux kernel mac80211
Published: October 15, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper initialization (CVE-ID: CVE-2026-98325)
CWE-ID: CWE-665 - Improper Initialization
CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local user to prevent failed wireless transmissions from being reported to userspace.
The vulnerability exists due to improper initialization of socket buffer transmit metadata in the mac80211 transmit path when handling transmit header construction and socket buffer resizing failures. A local user can trigger the affected transmit failure paths to prevent failed wireless transmissions from being reported to userspace.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/03d67414bd05b86029afc14535238a9393eac1c6
- https://git.kernel.org/stable/c/0fb37d2b6cb829cebdaea80f39011469f474bdcc
- https://git.kernel.org/stable/c/36e6f0a5e6d7238f4023e77f423c1c1414374309
- https://git.kernel.org/stable/c/420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa
- https://git.kernel.org/stable/c/50d3d79dc0743b616afb00d01a626c76758721f7
- https://git.kernel.org/stable/c/df711e9fa20d7e996711c7f43a11a71805bef78d