Cloudanix VulnDB

CVE-2026-98425

None

CVSS

—

EPSS

0.2%

Published

Oct 14, 2026

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A small coding issue that could produce extra warning messages in certain wireless setups has been corrected.

Exploitation
Other
Attacker needs
None
Complexity
Theoretical
Impact
Other
Component
OS kernel
Class
Other
Remediation
Patch
Effort
Low
Patch risk
None

What it actually does

Unnecessary kernel warning emitted by ieee80211_request_ibss_scan when regulatory domain changes leave no allowed channel for an active IBSS during its 60-second grace period.

Why it matters to the business

Spurious log noise that may trigger unnecessary alerts or complicate troubleshooting in wireless environments with dynamic regulatory configurations.

How an attack unfolds

No exploitation path exists; the issue is limited to an erroneous warning condition triggered by normal regulatory domain transitions while IBSS remains briefly operational.

How to fix it

Update to a Linux kernel version containing the fix that removes the warning; no configuration changes required.

How to confirm the fix worked

Confirm absence of the warning in kernel logs during regulatory domain changes while IBSS is active; verify the commit removing the warning is present in the running kernel source.

How to detect it

Search kernel logs for the warning string from ieee80211_request_ibss_scan related to IBSS channel scanning; no post-exploitation artifacts exist.

What your security team should do

  • Apply the kernel update containing the fix during the next maintenance window
  • Monitor kernel logs for the specific warning string to confirm resolution
  • Review wireless regulatory handling in environments with frequent domain transitions

The record

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211_request_ibss_scan() warns when regulatory leaves no allowed channel, but that can happen as the regdomain can change while IBSS is operating, and it can continue to operate briefly during the 60s grace period until it's shut down. Just remove the warning in this case.

Affected packages

Ecosystem Package Introduced Fixed