Skip to main content
CVE-2026-98426VulnerabilityPublished Updated

Microsoft · wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98426· Low

Not known to be exploited · fixed in fcac5813f324cd07dfd36b4adf624fc70f7587d6 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in fcac5813f324cd07dfd36b4adf624fc70f7587d6, a3d722190cdef18da4878b5efc27c3c386dda248, 2761b21cb896b1da8dd46cee5084c9032b2d7098 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < fcac5813f324cd07dfd36b4adf624fc70f7587d6
Fixed in
  • fcac5813f324cd07dfd36b4adf624fc70f7587d6
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < a3d722190cdef18da4878b5efc27c3c386dda248
Fixed in
  • a3d722190cdef18da4878b5efc27c3c386dda248
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < 2761b21cb896b1da8dd46cee5084c9032b2d7098
Fixed in
  • 2761b21cb896b1da8dd46cee5084c9032b2d7098
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < 0969c9688389f2e0f65b1a924b0dd6625a3bb776
Fixed in
  • 0969c9688389f2e0f65b1a924b0dd6625a3bb776
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < 11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd
Fixed in
  • 11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd
LinuxLinuxAffected
  • ≥ 99074fc1e67b374b5c72406a23ac01fed806d634, < 5fd4cc87e6cc0839aac89c24ebe39ce262fe088f
Fixed in
  • 5fd4cc87e6cc0839aac89c24ebe39ce262fe088f

Description

This vulnerability involves an IRQ leak caused by using an incorrect index in the MSI-X error path within the mwifiex WiFi driver. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation in the wild.

References

Community reviews

Loading reviews…