CVE-2026-98701

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: release mesh path quota on failed additions

Repeated failed or duplicate mesh path additions can exhaust

MESH_MAX_MPATHS while the path table holds fewer paths, which stops new

paths to reachable destinations from being created.

mesh_path_add() reserves a slot before allocating and inserting a path.

If allocation fails, the function returns without releasing the slot. If

the rhashtable insertion reports an error or an existing destination, the

function discards its candidate but retains the reservation. No new path

is installed in any of these cases.

Release the reservation whenever the candidate is not installed.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References