Live › vulnerability › CVE-2026-98700
Go to dashboardIn the Linux kernel's mac80211 Wi-Fi stack, frames using 802.3 encapsulation offload leave the band field unset, so the rate selection code picks rates for the wrong band. The sources describe a correctness flaw and do not state any attacker capability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with mac80211-based Wi-Fi drivers and 802.3 encap offload on non-MLD interfaces. The sources do not say which kernel versions or drivers are affected, so unknown beyond that.
No product ranges from the sources yet.
uname -r to see the running kernel versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: set info->band for 802.3 encap offload frames
Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames.
Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.
This page as .md · .json · in your agent: get_signal("CVE-2026-98700")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.