CVE-2026-98345
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211_classify8021d() A frame that looks like IP can be transmitted, but be too short, so the DS field is read incorrectly: BUG: KMSAN: uninit-value in cfg80211_classify8021d+0x99d/0x12b0 net/wireless/util.c:1027 cfg80211_classify8021d+0x99d/0x12b0 net/wireless/util.c:1027 ieee80211_select_queue+0x37a/0x9e0 net/mac80211/wme.c:180 __ieee80211_subif_start_xmit+0x60f/0x1d90 net/mac80211/tx.c:4304 ieee80211_subif_start_xmit+0xa8/0x6d0 net/mac80211/tx.c:4538 ... packet_sendmsg+0x9173/0xa2a0 net/packet/af_packet.c:3108 Use skb_header_pointer() like the MPLS case.
How to fix
- Linux Linux18d5547327c202cda33ad2bbd203220c2c62c8a7, 3ff17ffa8d02e0e3f6b2f6e57af4aac511f5b734, c4fbcf1e614ef0755fcc751fdfca21b0bf4e0ef7, 12c0abd4d1c1b04a7663d04ba85268bc9ad9c017, f33ad4e2f846e55cf4637419268f093ac9f1a765, a2cdb4a675ca04c4ac8cc962848082d8ce065008, 65893c8d28f239c7ddad5a83683be193a9133e9b, 48b2c5c628b09cf36cbeca53e0432fc2a7518be7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < 18d5547327c202cda33ad2bbd203220c2c62c8a7, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < 3ff17ffa8d02e0e3f6b2f6e57af4aac511f5b734, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < c4fbcf1e614ef0755fcc751fdfca21b0bf4e0ef7, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < 12c0abd4d1c1b04a7663d04ba85268bc9ad9c017, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < f33ad4e2f846e55cf4637419268f093ac9f1a765, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < a2cdb4a675ca04c4ac8cc962848082d8ce065008, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < 65893c8d28f239c7ddad5a83683be193a9133e9b, e31a16d6f64ef0e324c6f54d5112703c3f13a9c4 ≤ v < 48b2c5c628b09cf36cbeca53e0432fc2a7518be7, 2.6.31 | 18d5547327c202cda33ad2bbd203220c2c62c8a7, 3ff17ffa8d02e0e3f6b2f6e57af4aac511f5b734, c4fbcf1e614ef0755fcc751fdfca21b0bf4e0ef7, 12c0abd4d1c1b04a7663d04ba85268bc9ad9c017, f33ad4e2f846e55cf4637419268f093ac9f1a765, a2cdb4a675ca04c4ac8cc962848082d8ce065008, 65893c8d28f239c7ddad5a83683be193a9133e9b, 48b2c5c628b09cf36cbeca53e0432fc2a7518be7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.