Double free in Linux kernel - CVE-2026-98823

Vulnerability identifier: #VU157191

CSH Severity: Medium

CVSS v4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98823

CWE-ID: CWE-415

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker on the local network to potentially cause a denial of service through kernel memory corruption.

The vulnerability exists due to a double free in the Linux kernel cfg80211 scan-entry handling when merging a hidden-group probe-response entry into an associated entry after a channel switch. A remote attacker on the local network can trigger the affected processing to give two entries ownership of the same beacon information-element allocation, causing it to be freed twice when the entries are released and potentially resulting in a kernel crash.

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1

• https://git.kernel.org/stable/c/49b66110a08e4f926f6393e938f226de2750a08b
• https://git.kernel.org/stable/c/5617d5328839003c91007ce906b4f100b43926e9
• https://git.kernel.org/stable/c/5f27581c176f84b52ec0ab9be7b500c10667ef60
• https://git.kernel.org/stable/c/cc45f313d85533d647ce619326302aad6f797c14
• https://git.kernel.org/stable/c/dd7973a4130b0862be38d7e08cc0e874b3d99967

• Double free in Linux kernel wireless
• SUSE update for the Linux Kernel