Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.
References
- https://git.kernel.org/stable/c/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f
- https://git.kernel.org/stable/c/51092dc769f021e9634474e1bd5a561da477fbdb
- https://git.kernel.org/stable/c/7a5ef1fd654d0e90d59aa32c881789c8bcc4125a
- https://git.kernel.org/stable/c/80d1a110e9096b5bf41497f6b151154084862385
- https://git.kernel.org/stable/c/9df64ad43e1f2c036667bba2bf385e9d7b3af564
- https://git.kernel.org/stable/c/a6ed4c00ccdc15011a73daa2b38af9fc5a2c543e
- https://git.kernel.org/stable/c/a78689e2beed200d4590318612c74ae25c9408cf
FAQ
What is CVE-2026-98891?
CVE-2026-98891 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before c...
How severe is CVE-2026-98891?
CVSS scoring is not yet available for CVE-2026-98891. Check NVD for updates.
Is there a patch for CVE-2026-98891?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.