CVE-2026-98184: Linux kernel · wifi: mwifiex: prevent authentication frame length truncation
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in fa00193eb991f92b007aefe7afb6a7566976dacf : patch Linux kernel soon.
Data as of 26 Oct 2026, 13:47 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in fa00193eb991f92b007aefe7afb6a7566976dacf, 5747eaa38a7fcad48be2fd910b65008198b2b06c, 877b61a67d5eb3e616478daf3908114b57feff1e +1
Exploitation evidence
Disclosed: evidence found.
CVE published 6 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to fa00193eb991f92b007aefe7afb6a7566976dacf, 5747eaa38a7fcad48be2fd910b65008198b2b06c, 877b61a67d5eb3e616478daf3908114b57feff1e or 25c45a2075cc00faed45f92a64bb172fb074a2ee.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available and has been applied in the Linux kernel commits identified by the hashes fa00193eb991f92b007aefe7afb6a7566976dacf, 5747eaa38a7fcad48be2fd910b65008198b2b06c, 877b61a67d5eb3e616478daf3908114b57feff1e, and 25c45a2075cc00faed45f92a64bb172fb074a2ee. Users and administrators should update to a Linux kernel version including these fixes to remediate the vulnerability.
Description
A heap buffer overflow vulnerability exists in the Linux kernel's mwifiex driver due to improper handling of authentication frame length calculations. The vulnerability arises when the sum of authentication data lengths exceeds the maximum value storable in a 16-bit field, causing truncation and subsequent buffer overflow during frame processing. Exploitation requires CAP_NET_ADMIN privileges in the user namespace and a suitable network environment. The issue has been fixed in recent Linux kernel commits.
References
- git.kernel.org/stable/c/25c45a2075cc00faed45f92a64bb172fb074a2ee (opens in a new tab)
- git.kernel.org/stable/c/5747eaa38a7fcad48be2fd910b65008198b2b06c (opens in a new tab)
- git.kernel.org/stable/c/877b61a67d5eb3e616478daf3908114b57feff1e (opens in a new tab)
- git.kernel.org/stable/c/fa00193eb991f92b007aefe7afb6a7566976dacf (opens in a new tab)