01 Record

CVE-2026-98328

wifi: mac80211: add HE 6 GHz capability in the scan elems len

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: mac80211: add HE 6 GHz capability in the scan elems len

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 7.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-06 08:46Z23 DAYS AGO

Last updated

2026-10-19 09:17Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-131Incorrect Calculation of Buffer SizeBase

Data version

5.2

Document digest

40b2572fcea24094f854d9667fc4e3dd48d46897af5dceb093f9c28a16012166

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < db19d5414227d86cee77a000607a6710d7f36853, 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < be7bfdea1ec9b672a80c736bd6ed932e1adebef8, 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < 8659bd6c4c852096b6621086d1ea38eed84b454a, 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < ad5bd0f6a0c337a80c141ea8e6c7a1d9c145be79, 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < 9d83c08dcce808c732988a5291e3ef4f59d09edb, 2ad2274c58ee2dcaf9ccde5c63ff30f59b138f77 to < cd54bf333f5631d3630bab0a832e9ae648f73515, 5.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/db19d5414227d86cee77a000607a6710d7f36853
git.kernel.orghttps://git.kernel.org/stable/c/be7bfdea1ec9b672a80c736bd6ed932e1adebef8
git.kernel.orghttps://git.kernel.org/stable/c/8659bd6c4c852096b6621086d1ea38eed84b454a
git.kernel.orghttps://git.kernel.org/stable/c/ad5bd0f6a0c337a80c141ea8e6c7a1d9c145be79
git.kernel.orghttps://git.kernel.org/stable/c/9d83c08dcce808c732988a5291e3ef4f59d09edb
git.kernel.orghttps://git.kernel.org/stable/c/cd54bf333f5631d3630bab0a832e9ae648f73515

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.