Linux Kernel Vulnerability in Wi-Fi Configuration for Hidden Groups

CVE-2026-98823

What is CVE-2026-98823?

A vulnerability in the Linux kernel's Wi-Fi configuration, specifically within the cfg80211 subsystem, arises from improper handling of beacon information when associated with hidden groups. When a hidden-group probe-response entry borrows its beacon Information Elements (IEs) from the group's beacon, a flaw can occur during the merging of scan entries. This results in two owners for the same memory allocation, leading to potential memory corruption when the group’s beacon entry is released while the associated entry still points to the freed IEs. This vulnerability highlights the importance of maintaining integrity in memory management during probe-response processing for hidden groups, necessitating improvements to prevent these conflicting updates and preserve the system's stability.

References