{"id":"CVE-2026-98700","title":"wifi: mac80211: set info->band for 802.3 encap offload frames","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set info->band for 802.3 encap offload frames\n\nUnlike the 802.11 TX paths, ieee80211_8023_xmit() does not set\ninfo->band from the channel context on non…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 93c1b247224a32f546b616a8fe87b9bab20f0a7f","Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 9cedbfde1450028f530e9af950f53491fcaebfeb","Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5b","Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 4febc02cd02f021f2b6d0768332be643ef14a12d","Linux 5.7"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:46:30.043Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98700","references":[{"url":"https://git.kernel.org/stable/c/93c1b247224a32f546b616a8fe87b9bab20f0a7f"},{"url":"https://git.kernel.org/stable/c/9cedbfde1450028f530e9af950f53491fcaebfeb"},{"url":"https://git.kernel.org/stable/c/2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5b"},{"url":"https://git.kernel.org/stable/c/4febc02cd02f021f2b6d0768332be643ef14a12d"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.516Z","slug":"CVE-2026-98700","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set info->band for 802.3 encap offload frames\n\nUnlike the 802.11 TX paths, ieee80211_8023_xmit() does not set\ninfo->band from the channel context on non-MLD interfaces. It stays at\n0, so ieee80211_get_tx_rates() uses the wrong band for these frames.\n\nSet it the same way as ieee80211_build_hdr(): drop the frame if there is\nno channel context, and leave the band at 0 on MLD interfaces.\n\n## Affected\n\n- `Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 93c1b247224a32f546b616a8fe87b9bab20f0a7f`\n- `Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 9cedbfde1450028f530e9af950f53491fcaebfeb`\n- `Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5b`\n- `Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 4febc02cd02f021f2b6d0768332be643ef14a12d`\n- `Linux 5.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}