CVE-2026-98330

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When a network namespace is destroyed, the subsystem attempts to move wireless devices back to the default namespace, but a failure during the transfer can leave behind an invalid namespace reference. A local attacker can exploit this issue to trigger a kernel crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local system privileges and specialized hardware configurations that are rarely present in standard enterprise and cloud server deployments. The issue occurs only when wireless networking hardware is assigned to a non-default network namespace and subsequent teardown encounters an error, leaving a dangling pointer that can crash the kernel. Because typical server installations do not utilize Wi-Fi interfaces or assign them across isolated namespaces, general enterprise workloads face minimal exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.