CVE-2026-98700None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info->band for 802.3 encap offload frames Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: set info->band for 802.3 encap offload frames
Unlike the 802.11 TX paths, ieee80211_8023_xmit() does not set info->band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211_get_tx_rates() uses the wrong band for these frames.
Set it the same way as ieee80211_build_hdr(): drop the frame if there is no channel context, and leave the band at 0 on MLD interfaces.
Linux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 93c1b247224a32f546b616a8fe87b9bab20f0a7fLinux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 9cedbfde1450028f530e9af950f53491fcaebfebLinux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5bLinux >= 50ff477a8639fa1fbbeecb5a6f2f8b6c5557ecec < 4febc02cd02f021f2b6d0768332be643ef14a12dLinux 5.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device