Allocation of Resources Without Limits or Throttling in Linux kernel - CVE-2026-98705

Vulnerability identifier: #VU157045

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98705

CWE-ID: CWE-770

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker on the local network to bypass mesh path limits, potentially exhausting kernel memory and causing a denial of service.

The vulnerability exists due to improper resource quota accounting in the Linux kernel mac80211 mesh path management code when creating and removing proxy paths. Proxy-path additions do not increment the shared path counter, but removals decrement it, allowing the counter to become negative. A remote attacker on the local network can induce repeated proxy-path creation and removal to allow subsequent mesh path additions to exceed MESH_MAX_MPATHS and potentially exhaust kernel memory.

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1

• https://git.kernel.org/stable/c/3b75831ceee76d32bb8e7ddd241904f92f9b5407
• https://git.kernel.org/stable/c/5a32409ed34a1868830899a5d2437f0b3bf3532c
• https://git.kernel.org/stable/c/a5f35d4b112af1415ff06bd501c8cc26cc08aa8b
• https://git.kernel.org/stable/c/c66ab4b94bb04c162485759196555e08c0965320
• https://git.kernel.org/stable/c/df072db65fdaa34ad15e1d66fc06a53e3e97f778

• Allocation of Resources Without Limits or Throttling in Linux kernel mac80211
• SUSE update for the Linux Kernel