CVE-2026-98891

Not enough EPSS history yet.

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.

• git.kernel.orghttps://git.kernel.org/stable/c/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f
• git.kernel.orghttps://git.kernel.org/stable/c/51092dc769f021e9634474e1bd5a561da477fbdb
• git.kernel.orghttps://git.kernel.org/stable/c/7a5ef1fd654d0e90d59aa32c881789c8bcc4125a
• git.kernel.orghttps://git.kernel.org/stable/c/80d1a110e9096b5bf41497f6b151154084862385
• git.kernel.orghttps://git.kernel.org/stable/c/9df64ad43e1f2c036667bba2bf385e9d7b3af564
• git.kernel.orghttps://git.kernel.org/stable/c/a6ed4c00ccdc15011a73daa2b38af9fc5a2c543e
• git.kernel.orghttps://git.kernel.org/stable/c/a78689e2beed200d4590318612c74ae25c9408cf

No related CVEs by CWE or product.