Linux Kernel Vulnerability in Wireless Protocol Handling

CVE-2026-98345

What is CVE-2026-98345?

A vulnerability exists in the Linux kernel's wireless subsystem that could lead to an improper handling of IP header sizes. Specifically, the cfg80211_classify8021d() function may read an improperly sized Data Structure (DS) field from frames that appear to be IP but do not meet the required length. This issue can cause uninitialized memory values to be accessed, potentially compromising system integrity. The vulnerability emphasizes the need for robust validation to prevent such discrepancies in the handling of wireless communication frames.

References