Bug 2552189 (CVE-2026-98425)

Summary:	CVE-2026-98425 kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	akhatavk, aos-team-art-private, asdas, dpaolell, jdelft, jupierce, lgarciaa, mbiarnes, ppalepu, ppostler, prdhamdh, rhel-process-autobot, sghai, sidsharm, suppawar, vlaad, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's mac80211 wireless subsystem. An unnecessary warning is triggered during an ad-hoc wireless network (Independent Basic Service Set or IBSS) scan when a regulatory domain change leaves no permitted channels available. A local user initiating network scans during this transition can cause the kernel to generate this warning, potentially leading to a Denial of Service (DoS) on systems configured to panic on warnings.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-10-14 13:42:05 UTC

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't warn when an IBSS has no channel to scan

ieee80211_request_ibss_scan() warns when regulatory leaves no
allowed channel, but that can happen as the regdomain can change
while IBSS is operating, and it can continue to operate briefly
during the 60s grace period until it's shut down.

Just remove the warning in this case.