---
id: CVE-2026-98336
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mac80211: don't offload TC setup on AP_VLAN interfaces

  AP_VLAN interfaces are purely virtual, so don't try to offload
  TC setup to drivers
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mac80211: don't offload TC setup on AP_VLAN interfaces

  AP_VLAN interfaces are purely virtual, so don't try to offload
  TC setup to drivers. We can't really use th…
severity: medium
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 61587f1556fec39e8bafc40c8715f560639a4cf2 <
    790221efbfece13a2347563b3785aaca48f192e2
  - >-
    Linux >= 61587f1556fec39e8bafc40c8715f560639a4cf2 <
    40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718
  - >-
    Linux >= 61587f1556fec39e8bafc40c8715f560639a4cf2 <
    9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11
  - >-
    Linux >= 61587f1556fec39e8bafc40c8715f560639a4cf2 <
    ea3ef2165e4751df2ee3bc1c07a192243a08faa5
  - >-
    Linux >= 61587f1556fec39e8bafc40c8715f560639a4cf2 <
    362bd5bce29ed0f6fd3d39a7065567777d70606e
  - Linux 6.4
published: '2026-10-06'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T09:18:26.170'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98336'
references:
  - url: 'https://git.kernel.org/stable/c/362bd5bce29ed0f6fd3d39a7065567777d70606e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/40bc8a268c3b6e21fa3a8dd1b4fd85aa905b9718'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/790221efbfece13a2347563b3785aaca48f192e2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9c34f01b8f2177dd4e1ee524ca1f9ca3fcd85a11'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ea3ef2165e4751df2ee3bc1c07a192243a08faa5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98336.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98336'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2546458'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98336'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98336'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98336.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-10-06T08:50:17.401Z'
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-1287
epss: 0.00175
epssPercentile: 0.06997
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't offload TC setup on AP_VLAN interfaces

AP_VLAN interfaces are purely virtual, so don't try to offload
TC setup to drivers. We can't really use the AP interface either
since we may not know it all the time, and it could technically
even change.

Just reject the TC offload so things get done in software.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98336.json)