CVE-2026-98351: wifi: virt_wifi: free skb when disconnected
Published Oct 6, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
wifi: virtwifi: free skb when disconnected
When the simulated link is disconnected, virtwifistartxmit() returns NETXMITDROP without freeing the skb. devhardstartxmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb.
Free the skb before returning the drop status.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the virt_wifi transmit path, free the skb when the simulated link is disconnected before returning NET_XMIT_DROP.
Event History
Oct 6, 2026
CVE Published
via MITRE·08:46 AM
Data Sourced
via MITRE·08:46 AM
Description
Data Sourced
via NVD·09:18 AM
Description