{"id":"CVE-2026-98700","kind":"vulnerability","aliases":["CVE-2026-98700"],"related":[],"title":"Linux kernel: wifi 802.3 encap frames sent on wrong band","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set info->band for 802.3 encap offload frames\n\nUnlike the 802.11 TX paths, ieee80211_8023_xmit() does not set\ninfo->band from the channel context on non-MLD interfaces. It stays at\n0, so ieee80211_get_tx_rates() uses the wrong band for these frames.\n\nSet it the same way as ieee80211_build_hdr(): drop the frame if there is\nno channel context, and leave the band at 0 on MLD interfaces.","summary":"In the Linux kernel's mac80211 Wi-Fi stack, frames using 802.3 encapsulation offload leave the band field unset, so the rate selection code picks rates for the wrong band. The sources describe a correctness flaw and do not state any attacker capability.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","mac80211","wifi"],"not_affected_if":["no-mac80211-wifi"],"how_to_check":"- `uname -r` to see the running kernel version\n- Check whether the wifi driver uses mac80211 with 802.3 encap offload enabled (unknown from the sources)","fix":"- Update the Linux kernel to a release that includes the upstream mac80211 fix (version unknown from the sources)","status":"open","published_at":"2026-10-18T16:17:23+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:18:56+00:00","updated_at":"2026-10-25T05:18:56+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T05:18:56Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream mac80211 fix (version unknown from the sources)","reach":"local","title":"Linux kernel: wifi 802.3 encap frames sent on wrong band","impact":"low","summary":"In the Linux kernel's mac80211 Wi-Fi stack, frames using 802.3 encapsulation offload leave the band field unset, so the rate selection code picks rates for the wrong band. The sources describe a correctness flaw and do not state any attacker capability.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","wifi","mac80211"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; sources describe wrong rate selection only","analyst_note":"Sources give no CVSS, attack vector or affected version range; check the NVD entry and the upstream kernel commit for the affected release ranges.","how_to_check":"- `uname -r` to see the running kernel version\n- Check whether the wifi driver uses mac80211 with 802.3 encap offload enabled (unknown from the sources)","needs_analyst":true,"not_affected_if":["no-mac80211-wifi"],"who_is_affected":"Systems running a Linux kernel with mac80211-based Wi-Fi drivers and 802.3 encap offload on non-MLD interfaces. The sources do not say which kernel versions or drivers are affected, so unknown beyond that.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00061,"input_tokens":3403,"output_tokens":540,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98700':13A,16A '0':112C,148C '802.11':89C '802.3':4A,35B,83C '8023':93C 'attack':65B 'band':10A,40B,53B,81C,99C,121C,146C 'build':132C 'capabl':66B 'channel':102C,141C 'code':47B 'context':103C,142C 'correct':58B 'cve':11A,14A 'describ':56B 'drop':134C 'encap':5A,84C 'encapsul':36B 'fi':31B 'field':41B 'flaw':59B 'follow':72C 'frame':6A,33B,86C,124C,136C 'get':115C 'hdr':133C 'ieee80211':92C,114C,131C 'info':80C,98C 'infrastructur':17B 'interfac':108C,151C 'kernel':2A,20B,26B,70C 'leav':38B,144C 'linux':1A,19B,25B,69C 'linux-kernel':18B 'mac80211':21B,28B,78C 'mld':107C,150C 'non':106C 'non-mld':105C 'offload':37B,85C 'path':91C 'pick':48B 'rate':45B,49B,117C 'resolv':76C 'select':46B 'sent':7A 'set':79C,97C,125C 'sourc':55B 'stack':32B 'state':63B 'stay':110C 'tx':90C,116C 'unlik':87C 'unset':42B 'use':34B,118C 'vulner':73C 'way':129C 'wi':30B 'wi-fi':29B 'wifi':3A,22B,77C 'wrong':9A,52B,120C 'xmit':94C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with mac80211-based Wi-Fi drivers and 802.3 encap offload on non-MLD interfaces. The sources do not say which kernel versions or drivers are affected, so unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98700","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98700","severity":null,"published_at":"2026-10-18T16:17:23+00:00","modified_at":"2026-10-21T13:21:38+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}