Linux Kernel Vulnerability in WiFi Module Affecting Multiple Devices

CVE-2026-98349

What is CVE-2026-98349?

A vulnerability has been identified within the Linux kernel's WiFi module, specifically in how it processes management frames. The functions responsible for handling beacon and probe responses fail to adequately validate the length of incoming frames. When a management frame is received, the system erroneously computes the length based on a fixed header size, which may lead to reading beyond the allocated memory of the buffer. This can potentially allow malicious users to manipulate the system by sending specifically crafted frames, possibly leading to denial of service or other unforeseen behaviors. Developers are advised to implement proper validation mechanisms to reject malformed frames before processing any fixed fields to mitigate this risk.

References