CVE-2026-98341

Summary

The Linux kernel's cfg80211 subsystem has a use-after-free vulnerability when handling WiFi scan requests during interface shutdown. When a scan is running and the network interface goes down, the system incorrectly frees the scan request while the driver may still be using it, leading to potential memory corruption.

Exploitability

Exploitation requires a specific sequence involving active WiFi scanning and interface shutdown, making it moderately difficult but possible with precise timing and control over the network interface state.

Blast radius

The vulnerability could affect any Linux system running WiFi with cfg80211 driver, potentially leading to kernel memory corruption that might allow privilege escalation or system instability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the kernel patch for CVE-2026-98341 which resolves the use-after-free issue in cfg80211 scan handling.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.