Linux Kernel Vulnerability in Monitor Mode WiFi Management by The Linux Foundation

CVE-2026-98890

What is CVE-2026-98890?

A vulnerability exists in the Linux kernel's WiFi management within monitor mode. Specifically, the lbs_hard_start_xmit() function improperly casts skb->data to a radiotap TX header while skipping the necessary header checks. This can lead to situations where short monitor frames can be misread, allowing for potential memory corruption or security bypasses. To mitigate the risk, it is essential to ensure that there are sufficient bytes available for both the radiotap TX header and the destination address field before utilizing the monitor-mode header layout.

References