CVE-2026-98339

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This flaw allows a nearby attacker operating a rogue wireless access point to cause a Denial of Service (DoS). When an access point changes channels, stale Basic Service Set (BSS) network entries may fail to be removed if unexpected network types are advertised. By broadcasting conflicting network attributes, an attacker can trigger internal data collisions within the kernel, leading to kernel warnings and potential system instability.

Red Hat has evaluated this vulnerability as having a Moderate impact because exploitation is constrained to adjacent wireless radio range and requires active Wi-Fi hardware interfaces. Typical enterprise server environments and container platforms running Red Hat Enterprise Linux do not deploy wireless networking components, substantially minimizing the attack surface. Systems are only vulnerable if an active Wi-Fi connection interacts with an adversarial or rogue access point broadcasting conflicting network data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.