# wifi: libipw: reject too-short beacon and probe responses

CVE record · `CVE-2026-98349`

- **Identifiers:** `CVE-2026-98349`
- **State:** Confirmed
- **Severity:** CVSS 7.1 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 6 Oct 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before cee6f141b3bebe62eb0363fd147acb52023935f0` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 23afeb5d2bdfd34c8a0a661876291a4fa9978293` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 89959ff00a978f3172726d3d5f861ee6f1aae26d` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 14ae269c1306053ddf1ccf37c4bd66e085a652d1` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before ff756e6647722b7d225d882f7bdb186d8eee318e` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 2c87bbc00dc93149d1dc4f803ad92d92e4ef3758` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 19959fb60228f6dccc40d55507f8b1a751c2dc89` (git)
  - affected: `b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 5ce5721e8cbe3e80db8f43851cc2a2a92485ef4b` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `2.6.14`
  - unaffected: `before 2.6.14` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.112 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.54 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.8 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.1 High, CVSS 3.1: `CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0025, the 16th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98349](https://www.cve.org/CVERecord?id=CVE-2026-98349)
- [NVD: CVE-2026-98349](https://nvd.nist.gov/vuln/detail/CVE-2026-98349)

### References from the CNA

- <https://git.kernel.org/stable/c/cee6f141b3bebe62eb0363fd147acb52023935f0>
- <https://git.kernel.org/stable/c/23afeb5d2bdfd34c8a0a661876291a4fa9978293>
- <https://git.kernel.org/stable/c/89959ff00a978f3172726d3d5f861ee6f1aae26d>
- <https://git.kernel.org/stable/c/14ae269c1306053ddf1ccf37c4bd66e085a652d1>
- <https://git.kernel.org/stable/c/ff756e6647722b7d225d882f7bdb186d8eee318e>
- <https://git.kernel.org/stable/c/2c87bbc00dc93149d1dc4f803ad92d92e4ef3758>
- <https://git.kernel.org/stable/c/19959fb60228f6dccc40d55507f8b1a751c2dc89>
- <https://git.kernel.org/stable/c/5ce5721e8cbe3e80db8f43851cc2a2a92485ef4b>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98349>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98349/>. Everything for agents: <https://agentprime.io/llms.txt>.