Missing Release of Resource after Effective Lifetime in Linux kernel - CVE-2026-98701

Vulnerability identifier: #VU157041

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98701

CWE-ID: CWE-772

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service by exhausting the mesh path quota and preventing new paths to reachable destinations from being created.

The vulnerability exists due to failure to release reserved mesh path slots in the Linux kernel mac80211 mesh_path_add() function when path allocation fails or insertion encounters an error or an existing destination. A local user can trigger repeated failed or duplicate mesh path additions to exhaust MESH_MAX_MPATHS even though the path table contains fewer installed paths, preventing new mesh paths from being created.

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo

Install security update from vendor's repository.

kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1

• https://git.kernel.org/stable/c/56691ed9ef792f180e008a43294a4dc059fbeca2
• https://git.kernel.org/stable/c/57bfaa8b2853425ab1b83114d823a62fe63f859f
• https://git.kernel.org/stable/c/7325a44474f20c1393a1c114c6811abce6ddfaf4
• https://git.kernel.org/stable/c/a59eca4557c7462aad1b160011013290a92de97d
• https://git.kernel.org/stable/c/a613c891906b558c10a4fa98ca29747b98e857cb

• Missing Release of Resource after Effective Lifetime in Linux kernel mac80211
• SUSE update for the Linux Kernel