CVE-2026-98891

not scored yet · published 2026-10-23

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.

Source: NVD CVE-2026-98891

References

• https://git.kernel.org/stable/c/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f
• https://git.kernel.org/stable/c/51092dc769f021e9634474e1bd5a561da477fbdb
• https://git.kernel.org/stable/c/7a5ef1fd654d0e90d59aa32c881789c8bcc4125a
• https://git.kernel.org/stable/c/80d1a110e9096b5bf41497f6b151154084862385
• https://git.kernel.org/stable/c/9df64ad43e1f2c036667bba2bf385e9d7b3af564
• https://git.kernel.org/stable/c/a6ed4c00ccdc15011a73daa2b38af9fc5a2c543e
• https://git.kernel.org/stable/c/a78689e2beed200d4590318612c74ae25c9408cf

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.