CVE-2026-98423
kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 14, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel's mac80211_hwsim virtual wireless driver. A local attacker can cause a denial of service (DoS) by triggering a race condition between simulated radio shutdown and incoming network frame delivery from user space. Stopping the radio while frames are being processed triggers an unexpected kernel warning, which can lead to system instability or a kernel crash if the system is configured to halt on warnings.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition