Linux Kernel Wi-Fi Configuration Grouping Vulnerability

CVE-2026-98340

What is CVE-2026-98340?

In the Linux kernel, a vulnerability exists in the Wi-Fi configuration layer (cfg80211) that affects how groups of Basic Service Sets (BSS) with hidden service set identifiers (SSID) are handled. When a probe response is received for an unknown BSS, the kernel attempts to group it based on the existing entries, potentially leading to incorrect groupings if entries lack beacon elements. This flaw could result in unauthorized access or mismanagement of wireless configurations, underscoring the importance of patching and securing network communications.

References