Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98349

wifi: libipw: reject too-short beacon and probe responses

CVSS 7.1 HighEPSS 0.0025 · 16th percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before cee6f141b3bebe62eb0363fd147acb52023935f0 git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 23afeb5d2bdfd34c8a0a661876291a4fa9978293 git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 89959ff00a978f3172726d3d5f861ee6f1aae26d git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 14ae269c1306053ddf1ccf37c4bd66e085a652d1 git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before ff756e6647722b7d225d882f7bdb186d8eee318e git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 2c87bbc00dc93149d1dc4f803ad92d92e4ef3758 git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 19959fb60228f6dccc40d55507f8b1a751c2dc89 git
  • affected b453872c35cfcbdbf5a794737817f7d4e7b1b579 to before 5ce5721e8cbe3e80db8f43851cc2a2a92485ef4b git
Other versions: unaffected
Linux Linux
  • affected 2.6.14
  • unaffected before 2.6.14 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98349
CNA
Linux
Tags
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.1 High 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0025, the 16th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.