Strix
69.1K

CVE-2026-98311

HIGHCVSS 7.8/10EPSS 0.22%

Last modified

CVE-2026-98311 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_transfer_operstate() before register_netdevice(). If the lower device is dormant, that queues the new netdev on lweventlist while it is still uninitialized. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_transfer_operstate() before register_netdevice(). If the lower device is dormant, that queues the new netdev on lweventlist while it is still uninitialized. If registration fails after that, for example because of an invalid name such as "bad/name", free_netdev() immediately frees the object. A later linkwatch_fire_event() then use-after-frees the list entry. Move the transfer to after netdev_upper_dev_link(), as macvlan and ipvlan already do.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.22%

11.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c7cdba31ed8b87526db978976392802d3f93110c, < ee9ea1afd6990def51d52b3a0aecd5cfcc951da0; >= c7cdba31ed8b87526db978976392802d3f93110c, < 9ce26201f6dedf3fa02b97da8c67ee6f6c5f7225; >= c7cdba31ed8b87526db978976392802d3f93110c, < f9526054c2b2cace5916b7225603d008834ec011; >= c7cdba31ed8b87526db978976392802d3f93110c, < e8304e25c6dabb8accf38b807969438d0ce84fd7; >= c7cdba31ed8b87526db978976392802d3f93110c, < ca49763c42c1089d654bf11b037980a9ede3772c; >= c7cdba31ed8b87526db978976392802d3f93110c, < 293c56a66510bb7de073a1aba388e38abddff1fb; >= c7cdba31ed8b87526db978976392802d3f93110c, < b808a9af5fd21f9c68b0d024eda7535b5dce6a4e; >= c7cdba31ed8b87526db978976392802d3f93110c, < e5c8d7acd31b27057ea42cd405d0b3ece097bc89
LinuxLinux5.0

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98311?
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_transfer_operstate() before register_netdevice(). If the lower device is dormant, that queues the new netdev on lweventlist while it is still uninitialized. If registration fails after that, for example because of an invalid name such as "bad/name", free_netdev() immediately frees the object. A later linkwatch_fire_event() then use-after-frees the list entry. Move the transfer to after netdev_upper_dev_link(), as macvlan and ipvlan already do.
How severe is CVE-2026-98311?
CVE-2026-98311 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98311?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98311?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST