In the Linux kernel, the following vulnerability has been resolved:

wifi: virt_wifi: free skb when disconnected

When the simulated link is disconnected, virt_wifi_start_xmit() returns
NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this
return value as consumed, so every packet sent while disconnected leaks its
skb.

Free the skb before returning the drop status.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c7cdba31ed8b87526db978976392802d3f93110c affected < 38d3a5df85345f158f78b478b265ca906224454e
c7cdba31ed8b87526db978976392802d3f93110c affected < ee053ea35c759135460f03d1c574f4ed08de844a
c7cdba31ed8b87526db978976392802d3f93110c affected < d177eca79e1106834bc423d3969a4a2e3987996a
c7cdba31ed8b87526db978976392802d3f93110c affected < 36727a702cf8e3399e3da60d0856378f6afcfb34
c7cdba31ed8b87526db978976392802d3f93110c affected < 56469996c10a0240653fc00576b4d33bdfb4cc51
c7cdba31ed8b87526db978976392802d3f93110c affected < 4f266738af45675faa0e8afee08c6e780afa8b06
c7cdba31ed8b87526db978976392802d3f93110c affected < 46371442847a725cc0df3697fea2eba1dd54b82b
c7cdba31ed8b87526db978976392802d3f93110c affected < f9edf7cf63b96d2b776fca8d258d3c5256e40c8e
Linux Linux affected
Version Status Constraints
5.0 affected —
0 unaffected < 5.0
5.10.271 unaffected ≤ 5.10.*
5.15.222 unaffected ≤ 5.15.*
6.1.189 unaffected ≤ 6.1.*
6.6.158 unaffected ≤ 6.6.*
6.12.112 unaffected ≤ 6.12.*
6.18.54 unaffected ≤ 6.18.*
7.2.8 unaffected ≤ 7.2.*
7.3-rc4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34 cve-icon cve-icon
https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e cve-icon cve-icon
https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b cve-icon cve-icon
https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06 cve-icon cve-icon
https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51 cve-icon cve-icon
https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a cve-icon cve-icon
https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a cve-icon cve-icon
https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e cve-icon cve-icon
History

Tue, 06 Oct 2026 09:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status.
Title wifi: virt_wifi: free skb when disconnected
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-06T08:46:39.335Z

Reserved: 2026-09-25T10:25:14.343Z

Link: CVE-2026-98351

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-06T09:18:28.437

Modified: 2026-10-06T09:18:28.437

Link: CVE-2026-98351

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.