CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point (AP) fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on the affected interface, resulting in a system crash and a Denial of Service (DoS).

A flaw with low impact was found in the Linux kernel's mac80211 wireless subsystem. When ieee80211_start_ap() fails after setting beacon parameters such as enable_beacon and beacon_int, the error path does not reset this state. A local attacker with the privileges required to configure wireless interfaces (CAP_NET_ADMIN) could then trigger scanning or off-channel operations on such an interface, causing the kernel to attempt to restore beaconing from inconsistent state, leading to a divide error (kernel oops) and a denial of service. Red Hat Enterprise Linux 7 through 10 (kernel and kernel-rt), Red Hat In-Vehicle OS, and OpenShift Container Platform RHEL CoreOS 8 and 9 images are recorded as affected with the fix deferred: because exploitation requires local privileged wireless configuration access and the consequence is limited to loss of availability, the fix is deferred to a future scheduled kernel update, and the residual risk is a local denial of service only. The Red Hat impact rating of low is lower than the CVSS 3.1 moderate severity (score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because triggering the flaw requires local privileged access and there is no confidentiality or integrity impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.