CVE-2026-98351 PUBLISHED

wifi: virt_wifi: free skb when disconnected

Assigner: Linux
Reserved: 25.09.2026 Published: 06.10.2026 Updated: 06.10.2026

In the Linux kernel, the following vulnerability has been resolved:

wifi: virt_wifi: free skb when disconnected

When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb.

Free the skb before returning the drop status.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to 38d3a5df85345f158f78b478b265ca906224454e (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to ee053ea35c759135460f03d1c574f4ed08de844a (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to d177eca79e1106834bc423d3969a4a2e3987996a (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to 36727a702cf8e3399e3da60d0856378f6afcfb34 (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to 56469996c10a0240653fc00576b4d33bdfb4cc51 (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to 4f266738af45675faa0e8afee08c6e780afa8b06 (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to 46371442847a725cc0df3697fea2eba1dd54b82b (excl.)
  • affected from c7cdba31ed8b87526db978976392802d3f93110c to f9edf7cf63b96d2b776fca8d258d3c5256e40c8e (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.0 is affected
  • unaffected from 0 to 5.0 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.54 to 6.18.* (incl.)
  • unaffected from 7.2.8 to 7.2.* (incl.)
  • unaffected from 7.3-rc4 to * (incl.)

References