Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure kernel 6.6.157.1-1 may send Wi‑Fi data to wrong VLAN
published 17 days ago
Summary
The Linux kernel version used in Azure can mix up Wi‑Fi frames, sending a packet from one virtual network to a different virtual network on the same access point. This could let traffic be seen by devices it shouldn’t reach, potentially exposing sensitive data. Update the kernel to the patched version as soon as possible to ensure each frame stays on its intended VLAN.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.157.1-1 |
Original advisory text
CVE-2026-98822 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: prevent AP VLAN tx from other interfaces
Since the station lookup was factored out of ieee80211_build_hdr(),
ieee80211_lookup_ra_sta() uses sta_info_get_bss() for all AP and AP VLAN
frames, not only for control port frames. A unicast frame sent on one
interface thus matches a station of a different VLAN of the same BSS and
is transmitted to it.
Only match stations of the interface the frame is sent on, except for
control port frames, since those may be sent for VLAN stations directly
on the BSS interface.
wifi: mac80211: prevent AP VLAN tx from other interfaces
Since the station lookup was factored out of ieee80211_build_hdr(),
ieee80211_lookup_ra_sta() uses sta_info_get_bss() for all AP and AP VLAN
frames, not only for control port frames. A unicast frame sent on one
interface thus matches a station of a different VLAN of the same BSS and
is transmitted to it.
Only match stations of the interface the frame is sent on, except for
control port frames, since those may be sent for VLAN stations directly
on the BSS interface.
References
Timeline
Published18 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
AZL-108993 · OSV
Track software like this
Free during beta