Deauthentication Frame Vulnerability in Linux Kernel

CVE-2026-98891

What is CVE-2026-98891?

In the Linux kernel, a vulnerability occurs when the ieee80211_rx_mgmt_deauth() function does not validate the deauthentication frame length before reading the reason code. This oversight can potentially lead to issues if the fixed field is absent in the received frame, allowing for exploits that could compromise the stability and security of the system. The flaw has been addressed by ensuring that the frame length is validated before accessing the reason code.

References