CVE-2026-98336 wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
A flaw in Linux kernel Wi-Fi handling allows denial of service on AP_VLAN interfaces due to improper traffic control offloading.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98336?
CVE-2026-98336 is a denial of service vulnerability in Linux, published on 6 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: don't offload TC setup on AP_VLAN interfaces
AP_VLAN interfaces are purely virtual, so don't try to offload TC setup to drivers. We can't really use the AP interface either since we may not know it all the time, and it could technically even change.
Just reject the TC offload so things get done in software.
Which versions are affected by CVE-2026-98336?
How do I fix CVE-2026-98336?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-98336 being exploited?
There is no known exploitation of CVE-2026-98336 in the wild and no public exploit code.
Sources
Also known as AZL-106317, BELL-CVE-2026-98336, DEBIAN-CVE-2026-98336, GHSA-rmwf-m6v4-6j39, UBUNTU-CVE-2026-98336.