CVE record · CVE-2026-98351

wifi: virt_wifi: free skb when disconnected

No CVSS scoreEPSS 0.0016 · 5th percentile

Published by the CVE Program (CNA: Linux) at 6 Oct 2026, 08:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before 38d3a5df85345f158f78b478b265ca906224454e git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before ee053ea35c759135460f03d1c574f4ed08de844a git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before d177eca79e1106834bc423d3969a4a2e3987996a git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before 36727a702cf8e3399e3da60d0856378f6afcfb34 git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before 56469996c10a0240653fc00576b4d33bdfb4cc51 git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before 4f266738af45675faa0e8afee08c6e780afa8b06 git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before 46371442847a725cc0df3697fea2eba1dd54b82b git
  • affected c7cdba31ed8b87526db978976392802d3f93110c to before f9edf7cf63b96d2b776fca8d258d3c5256e40c8e git
Other versions: unaffected
Linux Linux
  • affected 5.0
  • unaffected before 5.0 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.54 to 6.18.*, inclusive semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98351
CNA
Linux
Published
6 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0016, the 5th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 6 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.