Race condition in Linux kernel - CVE-2026-98706
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local user to potentially cause a denial of service.
The vulnerability exists due to a race condition in the mac80211 station teardown and power-save delivery code when removing an AP or mesh station while power-save delivery work is running. A local user can exploit overlapping teardown and delivery operations to cause driver notifications and queue updates after the corresponding station state has been removed or cleaned up, potentially causing a denial of service.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98706
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/097460fcdd8ab9ef6f6018b2fdc29ba0ea499298
- https://git.kernel.org/stable/c/67a9e80c3ca20c9044cd6ee72cd6278dd19b5023
- https://git.kernel.org/stable/c/772bd89304ecf057cc51ce4ce24a1a96ac9c8de3
- https://git.kernel.org/stable/c/843d3a1e6f25027ac85f88f67b95d82c67306dee
- https://git.kernel.org/stable/c/cbff71fe689f359ebd6a3eaded035ef75226afce