CVE-2026-98700 wifi: mac80211: set info->band for 802.3 encap offload frames
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-98700?
CVE-2026-98700 is a vulnerability in Linux, published on 18 Oct 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: set info->band for 802.3 encap offload frames
Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames.
Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.
Which versions are affected by CVE-2026-98700?
How do I fix CVE-2026-98700?
Upgrade to a fixed version.
Is CVE-2026-98700 being exploited?
There is no known exploitation of CVE-2026-98700 in the wild and no public exploit code.
Sources
Also known as AZL-108987, BELL-CVE-2026-98700, DEBIAN-CVE-2026-98700, GHSA-5cc8-qw42-jp7f, UBUNTU-CVE-2026-98700.