Strix
73.2K

CVE-2026-98890

UnknownEPSS 0.19%

Last modified

CVE-2026-98890 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbs_hard_start_xmit() casts skb->data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The generic length check only rejects zero-length and oversized skbs, so a short monitor frame can be read past the end of the skb data. Require enough bytes for the radiotap TX header and the destination address field before using the monitor-mode header layout.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbs_hard_start_xmit() casts skb->data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The generic length check only rejects zero-length and oversized skbs, so a short monitor frame can be read past the end of the skb data. Require enough bytes for the radiotap TX header and the destination address field before using the monitor-mode header layout.

Metrics

EPSS Probability
0.19%

8.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < 68c92c991ddb75dfd3fd62a94a1d4d2dde44dc3c; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < d865dd6de8295f2bfaa83f0f5d49d2bef1543065; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < 6576baa3fdbaa91fa75e4ba27095f4b8a27349a8; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < b657cc98d7936c5d9ed7e0e1944ad0e1f36375bb; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < 443fac3de65c76544b450b9f9903be8989150d55; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < cdcfd662c67833d89ee3d912efde2eb67c8a7326; >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172, < 13ff543e0b2c713aedeaadadde686686e949dc78
LinuxLinux2.6.22

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98890?
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbs_hard_start_xmit() casts skb->data to a radiotap TX header, skips that header, and then copies the 802.11 destination address from offset 4 in the remaining frame. The generic length check only rejects zero-length and oversized skbs, so a short monitor frame can be read past the end of the skb data. Require enough bytes for the radiotap TX header and the destination address field before using the monitor-mode header layout.
How severe is CVE-2026-98890?
Severity scoring for CVE-2026-98890 is pending analysis. The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98890?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98890?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST