https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:31:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-98339 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: cfg80211: don&#39;t filter by BSS type when removing stale entries</p> <p>When an assoc AP switches to a channel that already has a BSS entry, cfg80211_update_assoc_bss_entry() removes that entry before rehashing the real one, since the two would otherwise collide in the BSS rbtree.</p> <p>The lookup for that entry also required it to match the connection&#39;s BSS type, so an entry advertising e.g. the IBSS capability bit was left in place, and the following cfg80211_rehash_bss() then ran into it:</p> <p>WARN_ON(!cmp)</p> <p>Changing the type shouldn&#39;t really happen, but can be triggered by a rogue AP/device, so drop the check and remove any entries matching the comparison.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: cfg80211: don&#39;t filter by BSS type when removing stale entries</p> <p>When an assoc AP switches to a channel that already has a BSS entry, cfg80211_update_assoc_bss_entry() removes that entry before rehashing the real one, since the two would otherwise collide in the BSS rbtree.</p> <p>The lookup for that entry also required it to match the connection&#39;s BSS type, so an entry advertising e.g. the IBSS capability bit was left in place, and the following cfg80211_rehash_bss() then ran into it:</p> <p>WARN_ON(!cmp)</p> <p>Changing the type shouldn&#39;t really happen, but can be triggered by a rogue AP/device, so drop the check and remove any entries matching the comparison.</p> https://vulnerability.circl.lu/vuln/cve-2026-98339