Improper initialization in Linux kernel - CVE-2026-98325
Published: October 15, 2026
Vulnerability identifier: #VU155939
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98325
CWE-ID: CWE-665
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to prevent failed wireless transmissions from being reported to userspace.
The vulnerability exists due to improper initialization of socket buffer transmit metadata in the mac80211 transmit path when handling transmit header construction and socket buffer resizing failures. A local user can trigger the affected transmit failure paths to prevent failed wireless transmissions from being reported to userspace.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-98325
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.113-1
linux (Debian package) - update to 6.12.113-1
External References
- https://git.kernel.org/stable/c/03d67414bd05b86029afc14535238a9393eac1c6
- https://git.kernel.org/stable/c/0fb37d2b6cb829cebdaea80f39011469f474bdcc
- https://git.kernel.org/stable/c/36e6f0a5e6d7238f4023e77f423c1c1414374309
- https://git.kernel.org/stable/c/420fcc2fdeae6ecd682d2b1605a0a54c88aed4aa
- https://git.kernel.org/stable/c/50d3d79dc0743b616afb00d01a626c76758721f7
- https://git.kernel.org/stable/c/df711e9fa20d7e996711c7f43a11a71805bef78d