Heap-based buffer overflow in Linux kernel - CVE-2026-98184

Vulnerability details

The vulnerability allows a local privileged user to corrupt heap memory.

The vulnerability exists due to a heap-based buffer overflow caused by authentication frame length truncation in mwifiex_cfg80211_authenticate() when processing authentication requests with oversized authentication data. A local privileged user can supply authentication data that causes the calculated frame length to exceed the capacity of a 16-bit field to corrupt heap memory.

Exploitation requires CAP_NET_ADMIN in the user namespace owning the network namespace, an up station network device, and a suitable BSS/SAE authentication request.

Affected software

How to mitigate CVE-2026-98184

External References

• https://git.kernel.org/stable/c/25c45a2075cc00faed45f92a64bb172fb074a2ee
• https://git.kernel.org/stable/c/5747eaa38a7fcad48be2fd910b65008198b2b06c
• https://git.kernel.org/stable/c/877b61a67d5eb3e616478daf3908114b57feff1e
• https://git.kernel.org/stable/c/fa00193eb991f92b007aefe7afb6a7566976dacf

Related Security Bulletins

• Heap-based buffer overflow in Linux kernel marvell mwifiex driver
• Debian update for linux