CVE-2026-98331

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When a network namespace hosting a wireless device is destroyed, memory allocation failures during device migration can leave unregistered network interfaces in internal tracking lists. A local user can exploit this issue to trigger a kernel crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because triggering it requires local access along with specific failure conditions, such as memory exhaustion during network namespace destruction, to induce a kernel crash. Red Hat Enterprise Linux systems deployed as typical servers rarely utilize physical wireless hardware or the mac80211 subsystem, significantly reducing the exposure in standard installations. Furthermore, triggering the condition requires creating and moving wireless interfaces across network namespaces, limiting the risk to environments where unprivileged user namespaces or container management permissions are permitted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.