Incorrect comparison in Linux kernel - CVE-2026-98339

Vulnerability details

The vulnerability allows a remote attacker to trigger a kernel warning.

The vulnerability exists due to incorrect BSS type comparison in cfg80211_update_assoc_bss_entry() when updating an associated access point's BSS entry after a channel change. A remote attacker can operate a rogue access point that switches to a channel containing an existing BSS entry with a mismatched advertised type to trigger a kernel warning.

The retained entry collides with the associated access point's entry in the BSS red-black tree during cfg80211_rehash_bss().

Affected software

How to mitigate CVE-2026-98339

External References

• https://git.kernel.org/stable/c/0aa44982125c86b47961be5ac1c82eddab8080f3
• https://git.kernel.org/stable/c/1380ee3a202dbb9f8e8b3c3b87eb410450d57799
• https://git.kernel.org/stable/c/64e23a36d8f04811372365b44cfca325f8e0f4bb
• https://git.kernel.org/stable/c/65fdb973bd905bc3f5cb045a04c1828f2d2a7e24
• https://git.kernel.org/stable/c/6d2fd26185678038ef2ea11dd4d2e6eccbf2dd25
• https://git.kernel.org/stable/c/6ef87a853327434ae1cd9c5a2c27a557fb4047fc
• https://git.kernel.org/stable/c/b377e1000d963e7182a987082b4b06580bd7ac84
• https://git.kernel.org/stable/c/fb445ec7480da5d2b82bf681e3b4313603722729

Related Security Bulletins

• Incorrect comparison in Linux kernel wireless
• Debian update for linux