{"id":33404,"date":"2026-10-06T20:31:55","date_gmt":"2026-10-06T12:31:55","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98335"},"modified":"2026-10-06T20:31:55","modified_gmt":"2026-10-06T12:31:55","slug":"cve-2026-98335","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98335","title":{"rendered":"CVE-2026-98335 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: abort"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mac80211: abort chanswitch when leaving a mesh<\/p>\n<p>The code in ieee80211_stop_mesh() leaves CSA active, but leaving<br \/>\nthe mesh released the channel context, so the CSA finalize work<br \/>\ncrashes:<\/p>\n<p>  Oops: general protection fault, probably for non-canonical address<br \/>\n        0xdffffc0000000003<br \/>\n  KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]<br \/>\n  RIP: 0010:ieee80211_put_srates_elem+0x42\/0x640 net\/mac80211\/util.c:3272<br \/>\n  Call Trace:<br \/>\n   ieee80211_mesh_build_beacon+0xa83\/0x1b50 net\/mac80211\/mesh.c:1093<br \/>\n   ieee80211_mesh_rebuild_beacon+0xc7\/0x170 net\/mac80211\/mesh.c:1147<br \/>\n   ieee80211_mesh_finish_csa+0x131\/0x210 net\/mac80211\/mesh.c:1542<br \/>\n   ieee80211_set_after_csa_beacon net\/mac80211\/cfg.c:4085 [inline]<br \/>\n   __ieee80211_csa_finalize net\/mac80211\/cfg.c:4133 [inline]<br \/>\n   ieee80211_csa_finalize+0x633\/0x1150 net\/mac80211\/cfg.c:4155<br \/>\n   cfg80211_wiphy_work+0x2ab\/0x450 net\/wireless\/core.c:438<\/p>\n<p>Abort the channel switch properly.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>wifi: mac80211: abort chanswitch when leaving a mesh<\/p>\n<p>The code in ieee80211_stop_mesh() leaves CSA active, but leaving<br \/>\nthe mesh rel<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-33404","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/33404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=33404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=33404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=33404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}