Buffer Overflow in Linux Kernel WiFi Driver

CVE-2026-98406

What is CVE-2026-98406?

A vulnerability exists in the Linux kernel's WiFi driver, specifically within the mac80211 module. The issue arises during the bitrate setting process where the function ieee80211_set_bitrate_mask() fails to verify proper interface conditions. This oversight can lead to warnings and potential instability when the sdata is running but not properly set within the driver state. The vulnerability has been triggered by specific ioctl commands, allowing exploitation under certain conditions when interface states are mistakenly checked, potentially exposing the system to risks. Proper checks have been implemented to prevent such issues, ensuring that driver interactions are conducted safely.

References