{"id":"CVE-2026-98346","revision":"6f745fdae5514d2fb73591342d2635a0","records":[{"revision":"6f745fdae5514d2fb73591342d2635a0","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98346","aliases":[],"title":"wifi: cfg80211: don't get the radio mask for netdev-less wdevs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: don't get the radio mask for netdev-less wdevs\n\ncfg80211_calculate_bi_data() calls rdev_get_radio_mask() with\nwdev->netdev, which can be NULL and then crashes in mac80211.\n\nTo avoid that, invert the order of checks since wdev->netdev\nis always valid for beaconing interfaces.","state":0,"publishedAt":"2026-10-06T08:46:35.409+00:00","modifiedAt":"2026-10-19T09:17:57.199+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/wireless/util.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"abb4cfe3661aa05426916b21164f88ca5a405a3a\",\n                            \"lessThan\": \"5b313159c970e945ee125ca87fad0d96ed913e55\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"abb4cfe3661aa05426916b21164f88ca5a405a3a\",\n                            \"lessThan\": \"693d777846d525b8b218bad97a1befa5d9bd4334\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"abb4cfe3661aa05426916b21164f88ca5a405a3a\",\n                            \"lessThan\": \"7166da84a7fe3553f9065782fd80299a37b150e5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"abb4cfe3661aa05426916b21164f88ca5a405a3a\",\n                            \"lessThan\": \"a7783e585360ee05dfe21d3173dbbe985c94f29e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/wireless/util.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/5b313159c970e945ee125ca87fad0d96ed913e55","https://git.kernel.org/stable/c/693d777846d525b8b218bad97a1befa5d9bd4334","https://git.kernel.org/stable/c/7166da84a7fe3553f9065782fd80299a37b150e5","https://git.kernel.org/stable/c/a7783e585360ee05dfe21d3173dbbe985c94f29e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98346","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98346","identifiers":["CVE-2026-98346"]},"retained":false,"historicalAffected":[]}],"coverage":[]}