CVE-2026-98351
wifi: virt_wifi: free skb when disconnected
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status.
INFO
Published Date :
Oct. 6, 2026, 9:18 a.m.
Last Modified :
Oct. 19, 2026, 10:18 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Free the skb before returning the drop status.
- Apply the provided patch to fix the memory leak.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-98351.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-98351 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-98351
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-98351 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-98351 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 19, 2026
Action Type Old Value New Value Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/98xxx/CVE-2026-98351.json">CVE-2026-98351</a> -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 06, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/98xxx/CVE-2026-98351.json">CVE-2026-98351</a> Added Reference https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34 Added Reference https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e Added Reference https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b Added Reference https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06 Added Reference https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51 Added Reference https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a Added Reference https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a Added Reference https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e