In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access… (CVE-2026-98891)

The Linux kernel's mac80211 subsystem had a vulnerability where the ieee80211_rx_mgmt_deauth() function accessed the deauthentication reason code before verifying that the deauthentication frame was of sufficient length to contain this field. This could result in reading beyond the frame boundary. The issue was fixed by adding validation of the deauthentication frame length prior to accessing the reason code.

Improper validation of the deauthentication frame length could lead to out-of-bounds memory reads within the kernel's WiFi management code. This may cause kernel instability or potentially enable denial of service conditions. No confirmed exploits or further impact details are provided.

A fix has been implemented in the Linux kernel to validate the deauthentication frame length before accessing the reason code. Users should apply the official kernel updates that include this patch. Since no vendor advisory or patch links are provided, check the Linux kernel mailing lists or official repositories for the relevant patch and update accordingly.