Linux Kernel Vulnerability in mac80211 Affecting Wireless Communication

CVE-2026-98824

What is CVE-2026-98824?

A vulnerability in the Linux kernel's mac80211 module can compromise wireless communication security. Specifically, the minstrel_ht_tx_status() function inadequately validated the HT/VHT rate reported during transmission, leading to potential out-of-bounds indexing. By failing to properly sanitize metadata, attackers could exploit this weakness, impacting overall network integrity. The recent patches ensure robust validation of transmission rate metadata, enhancing protection against malformed data that could have corrupted the mac80211 state. It is crucial for drivers to report accurate values consistently, as the new fixes do not absolve them of responsibility.

References