Threats Tagged 'cve-2026-98810'

A slab-out-of-bounds read vulnerability in the Linux kernel's mac80211 wifi subsystem was fixed in the ieee80211_monitor_select_queue() function. The issue arises because skb->len, which includes both linear and non-linear data, was used to validate pointer dereferences into skb->data, potentially causing out-of-bounds reads when packets become non-linear. The fix involves checking skb_headlen(skb), the length of the linear data region, before accessing skb->data. Similar fixes were applied to ieee80211_validate_radiotap_len() and ieee80211_monitor_start_xmit() to prevent similar out-of-bounds reads.