VLAN communication issue in Linux kernel affecting WiFi APs

CVE-2026-98822

What is CVE-2026-98822?

A vulnerability within the Linux kernel's WiFi subsystem can allow unicast frames to be improperly transmitted between different VLANs of the same Basic Service Set (BSS). This occurs due to a lack of proper matching between stations and the interfaces from which frames are sent, except for control port frames. The issue potentially exposes network communications to unauthorized access or manipulation, creating security risks in multi-VLAN environments.

References