Linux Kernel Vulnerability in Wireless Configuration and Management

CVE-2026-98339

What is CVE-2026-98339?

A vulnerability in the Linux kernel's cfg80211 wireless configuration subsystem allows for improper removal of stale BSS entries. When an associated access point (AP) switches channels, the system should clear any existing BSS entries to prevent collisions. However, due to a filter by BSS type during the removal process, some entries, especially those related to rogue APs, may be left unaddressed. This can lead to unexpected behavior during connection management and may allow attackers to exploit these stale entries.

References