CVE-2026-98422

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98422
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98422.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98422
Downstream
Published
2026-10-14T13:27:50Z
Modified
2026-10-15T02:47:42Z
Summary
wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown

On ifup, AP_VLAN interfaces get crypto_tx_tailroom_needed_cnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the same AP_VLAN up again will increment the counter again and eventually hit the sanity check:

WARN_ON_ONCE(sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt);

Reset it on ifdown to avoid that.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98422.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f9dca80b98caac8b4bfb43a2edf1e9f877ccf322
Fixed
b0b32d3f163d24ea7134380666193bf398e9dc0b
Fixed
f6b34a7d64324faf28eedc0f8678b0f832f1cc36
Fixed
304a874670a0b6ab5589a7f60b4af0251797b121
Fixed
7775759e3cb35ef5a571b2d877c2a9b70a5d5f08
Fixed
3d76b45e8432c0d75fcb9e90d92eaa3176898adf
Fixed
4b54d01b48445b66c9e576de92b90a3a3ae7b34a
Fixed
875835377d8d62c849b4eb03a7abfafa71d7668f
Fixed
4504f3960dc4501c73be9f99eabda2e26e9db41e

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98422.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.54
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98422.json"