Skip to main content
CVE-2026-98406VulnerabilityPublished Updated

set_bitrate_mask · wifi: mac80211: avoid WARN

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98406· Low

Not known to be exploited · fixed in da2ca406f45a6e21760243152ed8d2e8e72915c2 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in da2ca406f45a6e21760243152ed8d2e8e72915c2, c4ee5685af444024e6222ce29f6ed36adc44ffc3, c2cd9c44777cf97be3e35c10b7c2d8f59ebb9306 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < da2ca406f45a6e21760243152ed8d2e8e72915c2
Fixed in
  • da2ca406f45a6e21760243152ed8d2e8e72915c2
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < c4ee5685af444024e6222ce29f6ed36adc44ffc3
Fixed in
  • c4ee5685af444024e6222ce29f6ed36adc44ffc3
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < c2cd9c44777cf97be3e35c10b7c2d8f59ebb9306
Fixed in
  • c2cd9c44777cf97be3e35c10b7c2d8f59ebb9306
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < 7978dda63d2b109ea9c3f7a096cd1aac6542cd54
Fixed in
  • 7978dda63d2b109ea9c3f7a096cd1aac6542cd54
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < 4095b66acae9893dd13deb39a4331651cb2f822b
Fixed in
  • 4095b66acae9893dd13deb39a4331651cb2f822b
LinuxLinuxAffected
  • ≥ 554a43d5e77e8256aa9685ffd19ad555e6f77979, < 432c8532d5ccc2af77da43ed6ef1c80495a4efe8
Fixed in
  • 432c8532d5ccc2af77da43ed6ef1c80495a4efe8

Description

This vulnerability involves the wifi mac80211 component where a warning (WARN) can occur in the set_bitrate_mask function when sdata is not present in the driver. The issue affects specific Microsoft product versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…