CVE-2026-98311

A flaw was found in the Linux kernel's virt_wifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory associated with the device while it remains queued for background events, resulting in a use-after-free condition. This issue can lead to a system crash, causing a denial of service (DoS), or potentially allow arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.