CVE-2026-98338

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with NL80211_SCAN_FLAG_FLUSH can remove it, causing a warning in the event work: !bss WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3d3/0x440 Workqueue: cfg80211 cfg80211_event_work cfg80211_process_wdev_events+0x39f/0x5b0 net/wireless/util.c:1144 cfg80211_process_rdev_events+0xa1/0x110 net/wireless/util.c:1179 cfg80211_event_work+0x2f/0x40 net/wireless/core.c:393 Do the lookup early (the driver is expected to only join an IBSS that has a BSS entry) and keep a reference to it.

• https://git.kernel.org/stable/c/708f9d43d6a2eb9c6b83fe62af628de9dffd9314
• https://git.kernel.org/stable/c/b0e3f019e461ac42e45aa3ec1216cefaca2f4a8b

Published

Oct 6, 2026

Last Modified

Oct 6, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-98332In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98333In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98334In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98335In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98336In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98337In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98339In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-9834The WP Database Backup – Unlimited Database & Files Backup b…7.2
• CVE-2026-98340In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98341In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-98342In the Linux kernel, the following vulnerability has been re…
• CVE-2026-98343In the Linux kernel, the following vulnerability has been re…