CVE-2026-98325

A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during network packet transmission to cause improper resource release, potentially leading to a Denial of Service (DoS).

A low impact flaw was found in the Linux kernel's mac80211 wireless subsystem as shipped in Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift Container Platform (via the RHEL CoreOS kernel). Transmission control information in socket buffers (skb->cb) was initialized too late, so when frame header construction (ieee80211_build_hdr) or socket-buffer resizing (ieee80211_skb_resize) fails, the failed SKB is not released through the proper cleanup path and the failure is not reported to userspace. A local user able to transmit network traffic through the wireless stack could trigger these error paths to cause improper resource release, leading to a limited denial of service. The flaw is not remotely triggerable by ordinary received Wi-Fi traffic and involves no memory corruption, privilege escalation, or confidentiality or integrity impact. Although the CVSS:3.1 base score is 5.5 (Moderate), Red Hat rates the impact as Low because exploitation requires local access and depends on reaching uncommon error paths such as allocation failures, limiting the practical availability impact. Fixes for the affected product streams are currently deferred; given the local attack vector, the low likelihood of triggering the affected failure paths, and the limited availability impact, the residual risk of deferring is low.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.