Skip to main content
VulnerabilityPublished Updated

CVE-2026-98424: Linux kernel · wifi: cfg80211: undo netns switch if renaming the wiphy fails

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in a41bd1938a9bfe226d444172a7e20e4bd5097960 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 14:05 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in a41bd1938a9bfe226d444172a7e20e4bd5097960, 739b7bf3942da4cde8eedb143d01a16ed865d1d7, 96bef5667b0c4aecb1b850d2343f69b9d684abb9

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to a41bd1938a9bfe226d444172a7e20e4bd5097960, 739b7bf3942da4cde8eedb143d01a16ed865d1d7 or 96bef5667b0c4aecb1b850d2343f69b9d684abb9.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 463d018323851a608eef52a9427b0585005c647f, < a41bd1938a9bfe226d444172a7e20e4bd5097960
Fixed in
  • a41bd1938a9bfe226d444172a7e20e4bd5097960
LinuxLinuxAffected
  • ≥ 463d018323851a608eef52a9427b0585005c647f, < 739b7bf3942da4cde8eedb143d01a16ed865d1d7
Fixed in
  • 739b7bf3942da4cde8eedb143d01a16ed865d1d7
LinuxLinuxAffected
  • ≥ 463d018323851a608eef52a9427b0585005c647f, < 96bef5667b0c4aecb1b850d2343f69b9d684abb9
Fixed in
  • 96bef5667b0c4aecb1b850d2343f69b9d684abb9
LinuxLinuxAffected
  • =2.6.32
Fixed in–

AI-suggested

A fix is available in the Linux kernel commits identified by hashes a41bd1938a9bfe226d444172a7e20e4bd5097960, 739b7bf3942da4cde8eedb143d01a16ed865d1d7, and 96bef5667b0c4aecb1b850d2343f69b9d684abb9. Users should update their Linux kernel to a version including these commits to resolve the issue.

Description

A vulnerability in the Linux kernel's wifi cfg80211 subsystem could cause inconsistent network namespace states if renaming the wiphy device fails during a namespace switch. This issue occurs due to allocation failures during the rename operation, potentially leaving the device split across two namespaces and triggering kernel warnings.

References

Community reviews

Loading reviews…