Linux Kernel Vulnerability in mac80211 Wifi Scanning Process

CVE-2026-98337

What is CVE-2026-98337?

A vulnerability exists within the Linux kernel's mac80211 module that can lead to improper handling of off-channel requests (ROCs) during scanning operations. When a scan is initiated, the ROC list needs to be cleared; however, if a new ROC is added while the scan is in progress, it can trigger a warning about the state of operations. This issue arises from the failure to synchronize the start of new off-channel requests with ongoing scan activities, potentially leading to race conditions that could affect network stability. Addressing this vulnerability requires careful implementation to ensure that ROC operations do not overlap improperly with scanning tasks.

References