Linux Kernel WiFi Frame Injection Vulnerability Affecting Multiple Drivers

CVE-2026-98329

What is CVE-2026-98329?

A vulnerability in the Linux kernel's networking stack, specifically within the mac80211 subsystem, allows for the possibility of injecting frames that exceed the permitted operational bandwidth. When using the monitor interface, these wider frames carry a radiotap field requesting a wider bandwidth than what is operationally supported. This can lead to unexpected behaviors or warnings within the hardware simulation environment (hwsim). To address this issue, frames that are identified as exceeding the acceptable bandwidth limits are now dropped entirely, preventing any of these invalid frames from being processed by the driver.

References