---
id: CVE-2026-98425
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mac80211: don't warn when an IBSS has no channel to scan

  ieee80211_request_ibss_scan() warns when regulatory leaves no
  allowed channel, but that can happen as th…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mac80211: don't warn when an IBSS has no channel to scan

  ieee80211_request_ibss_scan() warns when regulatory leaves no
  allowed channel, but that can happen as th…
severity: medium
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T14:17:54.110'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98425'
references:
  - url: 'https://git.kernel.org/stable/c/23d51c0bc18f21d957756ba4650520bb3bc726b2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5f139e17f5bdba6b68177dd8afe13fa4549dfc5f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a7491b7efbd9136b120a12ed72af9c12121dd134'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bb91c15953705445778c170a2523f12351c4d928'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98425.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98425'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2552189'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98425'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98425'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98425.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-10-14T15:36:13.990Z'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 34bcf71502413f8903ade93746f2d0f04b937a78 <
    bb91c15953705445778c170a2523f12351c4d928
  - >-
    Linux >= 34bcf71502413f8903ade93746f2d0f04b937a78 <
    5f139e17f5bdba6b68177dd8afe13fa4549dfc5f
  - >-
    Linux >= 34bcf71502413f8903ade93746f2d0f04b937a78 <
    23d51c0bc18f21d957756ba4650520bb3bc726b2
  - >-
    Linux >= 34bcf71502413f8903ade93746f2d0f04b937a78 <
    a7491b7efbd9136b120a12ed72af9c12121dd134
  - Linux 5ca99e71a9a6cf33a217690f5d87bc0129d1effd
  - Linux 1cf18948040a40fa4497e40bcde2ffa8d6b1196e
  - Linux >= 3.4.26 < 3.5
  - Linux >= 3.7.3 < 3.8
  - Linux 3.8
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-617
epss: 0.00209
epssPercentile: 0.11008
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't warn when an IBSS has no channel to scan

ieee80211_request_ibss_scan() warns when regulatory leaves no
allowed channel, but that can happen as the regdomain can change
while IBSS is operating, and it can continue to operate briefly
during the 60s grace period until it's shut down.

Just remove the warning in this case.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, … · updated 2026-10-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98425.json)