Log in Start free

Vulnerability · Published Oct 18, 2026 · Assigned by Linux

CVE-2026-98704wifi: mac80211: keep fallback association elements alive

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 92.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits WMM, HT, or VHT information, ieee80211_assoc_config_link() parses the cached BSS IEs and copies the missing element pointers out of that fallback parse. For a non-transmitted MBSSID profile those pointers refer to merged-profile storage owned by the parse object, and the fallback block frees that object at its end. The copied pointers are used afterwards to determine the operating channel, configure bandwidth, and apply HT capabilities. Keep the fallback parse result alive until association setup finishes. [reorder variable declaration]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-98704
Debian:13linux6.12.113-1DEBIAN-CVE-2026-98704
Debian:14linux7.2.10-1DEBIAN-CVE-2026-98704
Debian:12linux-6.126.12.113-1~deb12u1DEBIAN-CVE-2026-98704
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98704
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-98704
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-98704
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-98704

Affected products (as reported)

VendorProductVersions
Linux Linux 5023b14cf4df4d22e1a80738167f3438c9e62e5f – before 409da4ad76d921b173ebb801e316023f745642395023b14cf4df4d22e1a80738167f3438c9e62e5f – before fb47973eecd869ab5662bb39002f6680536caa6c5023b14cf4df4d22e1a80738167f3438c9e62e5f – before 64183344f6f29ed0cad33d6ec0e769aa5e31fb195023b14cf4df4d22e1a80738167f3438c9e62e5f – before de77b0f68142147e74fac1c497dbe1f93daeeed95023b14cf4df4d22e1a80738167f3438c9e62e5f – before 1d9644753d46c86b4e5c05bd6d9d35339ea273315023b14cf4df4d22e1a80738167f3438c9e62e5f – before d0183cd1f6a2dba9e63be20af2f65093c9c8d1215023b14cf4df4d22e1a80738167f3438c9e62e5f – before 0878594c5806dd29fa5e16cc026ce19158afdad25023b14cf4df4d22e1a80738167f3438c9e62e5f – before a10a2f80476d166fd81c361ec0319493671b694e
Linux Linux 5.2

References