Improper handling of exceptional conditions in Linux kernel - CVE-2026-98424

Vulnerability identifier: #VU155886

CSH Severity: Low

CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98424

CWE-ID: CWE-755

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a local user to leave wireless device state inconsistent across network namespaces.

The vulnerability exists due to improper handling of a device rename failure in cfg80211_switch_netns() when moving a wireless device to another network namespace. A local user can initiate a network namespace change that encounters an allocation failure during the rename to leave wireless device state inconsistent across network namespaces.

The wireless device must support network namespace changes through the WIPHY_FLAG_NETNS_OK flag.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/739b7bf3942da4cde8eedb143d01a16ed865d1d7
• https://git.kernel.org/stable/c/96bef5667b0c4aecb1b850d2343f69b9d684abb9
• https://git.kernel.org/stable/c/a41bd1938a9bfe226d444172a7e20e4bd5097960

• Improper handling of exceptional conditions in Linux kernel wireless
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more