SB20261022310 - Allocation of Resources Without Limits or Throttling in Linux kernel mac80211

Description

This security bulletin contains information about 1 vulnerability.

1) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2026-98705)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker on the local network to bypass mesh path limits, potentially exhausting kernel memory and causing a denial of service.

The vulnerability exists due to improper resource quota accounting in the Linux kernel mac80211 mesh path management code when creating and removing proxy paths. Proxy-path additions do not increment the shared path counter, but removals decrement it, allowing the counter to become negative. A remote attacker on the local network can induce repeated proxy-path creation and removal to allow subsequent mesh path additions to exceed MESH_MAX_MPATHS and potentially exhaust kernel memory.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3b75831ceee76d32bb8e7ddd241904f92f9b5407
• https://git.kernel.org/stable/c/5a32409ed34a1868830899a5d2437f0b3bf3532c
• https://git.kernel.org/stable/c/a5f35d4b112af1415ff06bd501c8cc26cc08aa8b
• https://git.kernel.org/stable/c/c66ab4b94bb04c162485759196555e08c0965320
• https://git.kernel.org/stable/c/df072db65fdaa34ad15e1d66fc06a53e3e97f778