What is CVE-2026-98891?

CVE-2026-98891 is a unscored severity Linux kernel vulnerability. CVE-2026-98891 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98891?

CVE-2026-98891 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98891?

Yes, CVE-2026-98891 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.

Is CVE-2026-98891 actively exploited?

CVE-2026-98891 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98891

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 5.10.271 5.10.x ✓ 5.15.222 5.15.x ✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

7 total

Showing 5 of 7 references View all on NVD

Frequently asked questions

What is CVE-2026-98891?

CVE-2026-98891 is a unscored severity Linux kernel vulnerability . CVE-2026-98891 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98891?

Yes. CVE-2026-98891 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others.
Is CVE-2026-98891 actively exploited?

No. CVE-2026-98891 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.