CVE-2026-98326
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and then calls ieee80211_start_mesh(), which can fail. In that case, the chanctx isn't released then interface removal will attempt to unassign it after it's removed from the driver, hitting: wlan0: Failed check-sdata-in-driver check, flags: 0x0 WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx ieee80211_assign_link_chanctx __ieee80211_link_release_channel ieee80211_link_release_channel ieee80211_teardown_sdata unregister_netdevice_many_notify _cfg80211_unregister_wdev ieee80211_remove_interfaces ieee80211_unregister_hw mac80211_hwsim_del_radio hwsim_exit_net Correctly release the channel on start failures.
Affected versions
Linux kernel versions
3.9
and later are affected. Fixed in
6.1.189,
6.6.158,
6.12.112,
6.18.54,
7.2.8,
7.3-rc4
and their respective stable series.
References
6 totalFrequently asked questions
-
What is CVE-2026-98326?
CVE-2026-98326 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.9 onward and has been patched in 6.1.189, 6.6.158, 6.12.112 and others. CVE-2026-98326 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98326?
Yes. CVE-2026-98326 has been patched. Fixed versions include 6.1.189, 6.6.158, 6.12.112 and others. If you are running Linux kernel 3.9 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98326 actively exploited?
No. CVE-2026-98326 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.