{"id":"CVE-2026-98337","revision":"f0bf525ea2f64e5aa67958db465ef67b","records":[{"revision":"f0bf525ea2f64e5aa67958db465ef67b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98337","aliases":[],"title":"wifi: mac80211: don't start a ROC while scanning","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't start a ROC while scanning\n\nThe ROC work can be pending when a scan starts (which requires\nROC list to be empty, but that's possible), and then a new ROC\ncan be added to the list and the work will pick it up.\n\nAvoid starting that ROC if a scan made it between things, as\notherwise we'll hit a warning later:\n\n  WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0\n  Workqueue: events_unbound cfg80211_wiphy_work\n  Call Trace:\n   __ieee80211_scan_completed+0x4fd/0xe40 net/mac80211/scan.c:537\n   ieee80211_scan_work+0x472/0x1ff0 net/mac80211/scan.c:1193\n   cfg80211_wiphy_work+0x410/0x570 net/wireless/core.c:513","state":0,"publishedAt":"2026-10-06T08:46:28.42+00:00","modifiedAt":"2026-10-19T09:17:48.362+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/mac80211/offchannel.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"aaa016ccd5df89d73483d0d51ee1f692978ccc35\",\n                            \"lessThan\": \"5dc8ec2f8d1d62914661577c23ec151f5c9734a4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"aaa016ccd5df89d73483d0d51ee1f692978ccc35\",\n                            \"lessThan\": \"81baab8b645ec532bad2b7a8464191c720ef8fd9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"aaa016ccd5df89d73483d0d51ee1f692978ccc35\",\n                            \"lessThan\": \"58b806f699052c572dec6cab2c376f884f27e98f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"aaa016ccd5df89d73483d0d51ee1f692978ccc35\",\n                            \"lessThan\": \"733f0fde95392ed5f61a4e36aee661ea8d0e8581\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/mac80211/offchannel.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/5dc8ec2f8d1d62914661577c23ec151f5c9734a4","https://git.kernel.org/stable/c/81baab8b645ec532bad2b7a8464191c720ef8fd9","https://git.kernel.org/stable/c/58b806f699052c572dec6cab2c376f884f27e98f","https://git.kernel.org/stable/c/733f0fde95392ed5f61a4e36aee661ea8d0e8581"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98337","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98337","identifiers":["CVE-2026-98337"]},"retained":false,"historicalAffected":[]}],"coverage":[]}