Buffer Overflow Vulnerability in Linux Kernel Affecting IEEE 802.11 Processing

CVE-2026-98829

What is CVE-2026-98829?

A buffer overflow vulnerability exists in the Linux kernel's handling of IEEE 802.11 frame fragments. The issue arises when oversized fragments accumulate during processing, leading to an integer overflow in the extra_len variable, which is defined as a u16. If a sequence of large fragments exceeds 65535 bytes, it causes pskb_expand_head() to allocate insufficient tailroom, thereby crashing the kernel during data handling. This flaw can be exploited by a malicious device within a network, potentially impacting system stability and security. The recommended fix involves verifying fragment lengths to avoid exceeding the u16 limit and dropping oversized frames appropriately.

References