Linux Kernel Vulnerability in iwlwifi Driver Affects Wireless Communication

CVE-2026-98889

What is CVE-2026-98889?

A vulnerability in the Linux kernel's iwlwifi driver results from improper handling of oversized information elements (IEs) during scheduled scans. The issue arises because the probe request for the scheduled scan is built prior to the verification of the scan fit, which allows oversized IEs to be copied into the probe request buffer without proper length validation, potentially compromising system integrity. This vulnerability has been addressed by ensuring that the probe request construction occurs only after validating the size of the IEs, thereby enhancing security for wireless communications.

References