Security News
긴급도 10/100 심각도 미평가 · 미평가 악용확률 7.0%

CVE-2026-98337

Qualys 위협 인텔 · 심각도 4/5 · QID 6296902 · Debian
측면이동 쉬운 악용 대량 데이터 유출 서비스 거부
  • CVSS Temporal 1.7 (현재 위협 반영)
  • 익스플로잇 성숙도: 미증명 (1/4)
  • 공격 위치: 로컬/인증필요
  • 패치: 가능
In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't start a ROC while scanning

The ROC work can be pending when a scan starts (which requires
ROC list to be empty, but that's possible), and then a new ROC
can be added to the list and the work will pick it up.

Avoid starting that ROC if a scan made it between things, as
otherwise we'll hit a warning later:

WARNING: net/mac80211/offchannel.c:404 at ieee80211_start_next_roc+0x256/0x2d0
Workqueue: events_unbound cfg80211_wiphy_work
Call Trace:
__ieee80211_scan_completed+0x4fd/0xe40 net/mac80211/scan.c:537
ieee80211_scan_work+0x472/0x1ff0 net/mac80211/scan.c:1193
cfg80211_wiphy_work+0x410/0x570 net/wireless/core.c:513

NVD 상세 ↗   GitHub Advisory ↗   참고 링크 ↗

이 취약점을 다룬 기사 (1)

← 취약점 목록