CVE-2026-98329

A low impact flaw was found in the Linux kernel's mac80211 wireless networking subsystem, affecting the Red Hat Enterprise Linux 8, 9, and 10 kernels (kernel and kernel-rt), Red Hat In-Vehicle OS, and the RHEL CoreOS kernels shipped with OpenShift Container Platform 4. Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth wider than the operational channel bandwidth of the channel context; mac80211 passed this value down to the wireless driver without validating it against the channel context, which can trigger kernel warnings (such as a WARN_ON in mac80211_hwsim) or unexpected driver states. A local user with the ability to inject frames on a monitor interface, which requires privileges such as CAP_NET_RAW, could exploit this flaw to cause a local denial of service, with no impact to confidentiality or integrity. Red Hat Enterprise Linux 7 is not affected because the vulnerable code is not present in that release. Red Hat rated the impact of this flaw as Low because exploitation requires privileged local access and packet injection capability on a monitor interface, the typical consequence is driver warnings and log flooding rather than memory corruption, and a high availability impact is possible only on systems where panic_on_warn is enabled; this is lower than the MODERATE severity suggested by the Red Hat CVSS:3.1 score of 5.5. Because of the low impact, fixes for the affected product streams are deferred to future updates; the residual risk is limited to a local denial of service by an already-privileged local user with packet-injection capability.